{"id":11933,"date":"2018-06-21T15:00:56","date_gmt":"2018-06-21T19:00:56","guid":{"rendered":"https:\/\/southjerseytechies.net\/blog\/?p=11933"},"modified":"2023-07-12T18:21:42","modified_gmt":"2023-07-12T22:21:42","slug":"what-terms-you-need-to-know-to-get-your-business-gdpr-ready","status":"publish","type":"post","link":"https:\/\/southjerseytechies.net\/blog\/what-terms-you-need-to-know-to-get-your-business-gdpr-ready\/","title":{"rendered":"What Terms You Need to Know to Get Your Business GDPR-Ready"},"content":{"rendered":"

\"\"<\/p>\n

 <\/p>\n

What Is EU GDPR?\u00a0<\/b><\/h2>\n

The\u00a0EU GDPR\u00a0is a law designed to protect and empower residents of the EU by guiding business usage of personal data. In essence, it is reshaping the way corporations handle personal data by controlling its collection, use, and storage. It will replace the regulations and frameworks of the existing 20-year-old directive (95\/46\/EC).<\/p>\n

 <\/p>\n

Who Is the GDPR Protecting and Empowering?\u00a0<\/b><\/h2>\n

The data subject: This is any individual that can be directly or indirectly identified or uniquely singled out in a group of individuals, from any stored data.<\/p>\n

 <\/p>\n

What Is the GDPR Protecting?\u00a0<\/b><\/h2>\n

\"\"<\/p>\n

Personal data: This is any information relating to an individual, whether in reference to their private, professional, or public life. It includes things like names, photos, email addresses, location data, online identifiers, a person\u2019s bank details, posts on social networking websites, medical information, work performance details, subscriptions, purchases, tax numbers, education or competencies, locations, usernames and passwords, hobbies, habits, lifestyles, or a person\u2019s computer\u2019s IP address.<\/p>\n

 <\/p>\n

Who Is the GDPR Regulating?\u00a0<\/b><\/h2>\n

The data controller: This is the person who, alone or jointly with others, determines the purposes for, and means of, processing personal data. A data controller is not responsible for the act of processing (this falls to the data processor); they can be defined as the entity that determines motivation, condition, and means of processing.<\/p>\n

Generally, the role of the controller is derived from the organization\u2019s functional relation with the individual. That is, a business is the controller for the customer data it processes in relation to its sales, and an employer is the controller for the employee data they process in connection with the employment relationship.<\/p>\n

 <\/p>\n

Who Else Is the GDPR Regulating?\u00a0<\/b><\/h2>\n

\"\"<\/p>\n

Data processors: This is the person who processes personal data on behalf of the controller. Typical processors are IT service providers (including hosting providers) and payroll administrators. The processor is required to process the personal data in accordance with the controller\u2019s instructions and take adequate measures to protect the personal data. The GDPR does not allow data processors to use the personal data for other purposes beyond providing the services requested by the controller.<\/p>\n

 <\/p>\n

What Does the GDPR Consider \u201cProcessing?\u201d\u00a0<\/b><\/h2>\n

Processing refers to any operation or set of operations performed upon personal data, whether or not by automatic means\u2014such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure, or destruction. Processing must be fair and lawful, although transparency is significantly strengthened. The processor may not use the personal data for their own purposes.<\/p>\n

 <\/p>\n

What Rights Do the Data Subjects Have?\u00a0<\/b><\/h2>\n

Under the GDPR, data subjects can request the following:<\/p>\n