Implementation of GDPR: Learning with a local administration case study

Abstract

The General Data Protection Regulation has come into force in the European Union in May 2018 in order to meet current challenges related to personal data protection and to help harmonise the data protection across the EU. Although the GDPR was expected to benefit companies, being private or public, by offering consistency in data protection activities and liabilities across the EU countries and by enabling more integrated EU wide data protection policies, it poses new challenges to companies. However, if we take a step back and think that this regulation has been in transit for more than 2 years, and that only after the implementation of this regulation has begun the real concern is: are companies ready to make this leap?