When the European Commission first introduced the EU General Data Protection Regulation (GDPR) in 2012, then-VP Viviane Reding emphasized a particular goal: a one-stop shop where “a company will have to comply with one law for the whole of the EU territory…[and] will only have to deal with one single data protection authority (DPA)” of the Member State in which the company has its main establishment. However, writes Facebook Global Deputy Chief Privacy Officer Stephen Deadman, “this vision is in danger.” In this exclusive for Privacy Perspectives, Deadman and Facebook speak from experience of the likely consequences for the EU if the one-stop shop is rejected or seriously watered down.
Full Story