There only remain four months of the two-year period that the General Data Protection Regulation (“GDPR”) granted to companies, administrations and supervisory authorities to adapt to the new law. On 25 May 2018, the obligations set out by the Regulation will be fully enforceable and any infringement, punishable.
GDPR binds any companies that process personal data, either as controllers or processors, provided they have an establishment in the Union or, even if not, they offer goods or services to data subjects who are in the Union or monitor their behaviour.
The accountability principle obliges the controller to implement the appropriate technical and organisational measures in order to safeguard the rights of data subjects and demonstrate that the processing complies with the GDPR. ¿Can your company already demonstrate before data subjects and supervisory authorities compliance with the GDPR?
In Bartolome & Briones we are at your disposal for any queries you may have in relation to the new obligations that the GDPR sets forth, not just for Spanish companies but also for any companies offering their goods or services within the European Union.