GDPR AND ITS IMPACT ON IT DEPARTMENTS OF COMPANIES

Abstract

Since May 2008 applying EU GDPR regulation became mandatory for all member States. The aim of the GDPR (General Data Protection Regulation) is to protect all EU citizens from privacy and data breaches in today’s data-driven world. The (GDPR) is considered being the most important change in data privacy regulation in the last 20 years. As a consequence, all public institutions and private companies operating with personal data are obliged to fully comply with the requirements of the GDPR. As long as the data processing is automated and many information is collected in electronic format, the IT&C sector is deeply involved in assuring the fair level of personal data protection. The present paper aims to show some action to be taken by the management regarding the IT department within firms and institutions, in order to comply with GDPR regulation