Europe’s new privacy rules avoided phrasing the regulation with too many details where appropriate and kept the law abstract and based on principles, in part considering the speed and disruptiveness of technical innovation. However, the EU General Data Protection Regulation did not leave those areas free from oversight. The regulation emphasizes business responsibilities and grants advantages for those who voluntarily self-regulate by making themselves subject to a co-regulated code of conduct. CoCs invite all businesses — especially micro- to medium-sized enterprises — to credibly declare their compliance with the GDPR, Jörn Wittmann reports in this article for The Privacy Advisor.
Full Story