“The EU General Data Protection Regulation (GDPR) has a dual purpose: To protect individuals against infringement of their personal data and to ensure free flow of personal data in the internal market. The regulation therefore has both a human rights and a business purpose. The GDPR has substantial administrative fines for non-compliance with the regulation. The fines can be issued to the controller, ie the entity responsible for the processing of personal data, and the processor, ie the entity processing personal data on behalf of the controller. The fines are designed to make non-compliance a costly mistake for both large and small entities …” (more)
Mona Naomi Lintvedt, ‘Putting a price on data protection infringement’, International Data Privacy Law, https://doi.org/10.1093/idpl/ipab024. Published: 6 December 2021.
First posted 2021-12-10 14:50:53
Leave a Reply