Data protection

Better rules for small business

Stronger rules on data protection from 25 May 2018 mean citizens have more control over their data and business benefits from a level playing field. One set of rules for all companies operating in the EU, wherever they are based. Find out what this means for your SME.

Consent
Get their clear consent to process the data.Collecting from children for social media? Check age limit for parental consent.

Access and Portability
Let people access their data and give it to another company.

Warnings
Inform people of data breaches if there is a serious risk to them.

Erase data
Give people the ‘right to be forgotten’. Erase their personal data if they ask, but only if it doesn’t compromise freedom of expression or the ability to research.

Profiling
If you use profiling to process applications for legally-binding agreements like loans you must:

• Inform your customers;
• Make sure you have a person, not a machine, checking the process
  if the application ends in a refusal;
• Offer the applicant the right to contest the decision.

Marketing
Give people the right to opt out of direct marketing that uses their data.

Safeguarding sensitive data
Use extra safeguards for information on health, race, sexual orientation, religion and political beliefs.

Data transfer outside the EU
Make legal arrangements when you transfer data to countries that have not been approved by the EU authorities.

links：https://ec.europa.eu/justice/smedataprotect/index_en.htm