Why GDPR?

Understanding GDPR

Shalini Kurapati, CIPP/E

Co-founder, Clearbox AI

Course overview

An illustration of the letters GDPR placed into the circle of stars of the EU flag, with a background of 0s and 1s.

GDPR context
Principles, roles, responsibilities, and data subject rights
Legal grounds/basis, data subject rights, storage and transfers outside of the EU
Security of processing, privacy by design
GDPR and Artificial Intelligence

Why do we need laws like GDPR?

A set of balance scales with privacy on one side and freedom of expression on the other.

General Data Protection Regulation of the EU, since 25 May 2018

Other data protection laws and directives before GDPR
Privacy versus freedom of expression: Proportionality
Right to privacy: human right, control over information
Growth of trade, exchange of goods, services, and data

Privacy in the digital age

A cartoon illustration of data privacy in the digital age. The picture shows that technology can extract information about someone from a metaphorical haystack of big data. Two people are looking for personal information about others with digital tools shown as pitchforks. Another person dives into the haystack for information.

¹ European Data Protection Supervisor, Klein, G., Bauman, Y., The European Data Protection Supervisor presents the cartoon introduction to digital ethics, Publications Office, 2018, https://data.europa.eu/doi/10.2804/534765

Why is it special?

Map of the EU member states with flags.

Replaces national laws on data protection in EU
Iceland, Norway and Liechtenstein (in EEA) also fully adopted GDPR
Harmonized set of rules for data protection
To compare: the US has more than 51 laws on the topic

¹ Council of the European Union, The Member States of the European Union, Publications Office, 2020, https://data.europa.eu/doi/10.2860/082123 ² www.ncsl.org

GDPR: The key features

Illustration of connected devices across the internet representing flow of information.

Regulation to protect human rights in the digital age
Harmonized rules to avoid confusion for businesses
Global scope: to do business with EU/EEA citizens
Increased transparency and client trust

Let's practice!

Understanding GDPR