GDPR: FRRMEWORR FOR THE DIGITRL ECONOMY

摘要

The General Data Protection Regulation (GDPR) has been described by Elizabeth Denham, the UK's information commissioner, as "the biggest change to data protection law for a generation". The new regulation reflects Europe's efforts to safeguard privacy rights by promoting accountability, governance and transparency in the growing digital economy. All businesses operating within the UK and the European Union are expected to be compliant with GDPR requirements by 25 May 2018. The GDPR replaces the UK's current Data Protection Act (DPA, 1998) and includes legal consequences related to the obligations of data controllers and processors. Organisations can prepare for the new requirements by having a sound Information Security Management System (ISMS) that complies with information security standard ISO 27001:2015.