The European Commission has released two documents that will serve as the basis of a new data protection framework in the European Union. The documents are under review by Directorates-General, whose comments will be considered before the final version of the new regulation is published in late January. The draft regulation, which will repeal the existing Directive 95/46/EC, includes a right to be forgotten; a requirement to seek explicit consent when processing data for marketing and other purposes; a greater emphasis on the protection of children; a requirement for data protection officers, and a breach notification requirement, among other mandates. This IAPP exclusive provides a snapshot of the changes.
If you want to comment on this post, you need to login.