1. The General Data Protection Regulation act (GDPR)
The Njord Law Firm is coming..

2. The General Data Protection Regulation act (GDPR)
Are you one of the good or the bad guys when it comes to processing other peoples personal data?

3. The General Data Protection Regulation act (GDPR)
Background:
Rapid technological developments and globalization have brought new challenges for the protection of personal data. The scale of the collection and sharing of personal data has increased significantly. Technology allows both private companies and public authorities to make use of personal data on an unprecedented scale in order to pursue their activities.
Purpose:
The processing of personal data should be designed to serve mankind. (Preamble 4)
The right to the protection of personal data is not an absolute right; it must be considered in relation
to its function in society and be balanced against other fundamental rights, in accordance with the principle
of proportionality.

4. The General Data Protection Regulation act (GDPR)
Definitions:
'Personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, IP-address, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
In general; name, , address – think contact data
'Processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In general; If you save or forward someone’s personal information

5. The General Data Protection Regulation act (GDPR)
It’s impossible do one’s job without sometimes processing other people’s personal data.
What do you need to do after the May ?
Make sure you inform your subjects about what you are doing with their personal data.
Sometimes you will need to have their consent. Get that and store it as long as you need their data.
Store the data in a secure way.
Be aware if you transfer data to a country outside of EU.
Delete, delete, delete.

6. The General Data Protection Regulation act (GDPR)
Status at ITU September 12, 2017:
We’re doing interviews to know the baseline. That will help us scale the project.
A survey and interviews will be held with key employees around 1st – 15th of October 2017.
We will contact you afterwards with guidelines and specific instructions.