IT security guides: GDPR
An overview of the GDPR, the key obligations related to the processing of personal data
and the associated data protection requirements.
GDPR – General Data Protection Regulation
The GDPR, or General Data Protection Regulation, is the European Union’s general data
protection framework governing the processing and protection of individuals’ personal data.
The regulation entered into force in 2016 and has been applicable across EU Member States
since 25 May 2018.
The regulation may apply to any organization that processes personal data and acts as a data
controller or data processor. The GDPR aims to provide a consistent framework for protecting
personal data and sets out requirements relating to the lawfulness, transparency and security
of data processing.
Among other requirements, the regulation covers the definition of data processing purposes
and means, the protection of data subjects’ rights, the appropriate handling of personal data
breaches and organizations’ obligations regarding data protection policies and procedures.
GDPR regulation
General Data Protection Regulation (EU) 2016/679
The GDPR sets out requirements for organizations processing personal data, including rules on data processing, data protection and the rights of data subjects. Its purpose is to protect individuals’ personal data and define the obligations and
responsibilities associated with its
processing.
Regulation of electronic surveillance systems in public areas
Legislation governing electronic
surveillance systems used by
organizations for security purposes,
including requirements related to their
operation, data processing and data
protection.
Legislation on security cameras (Act on Private Security Services)
Legislation governing electronic
surveillance systems used by organizations for security purposes,
including requirements related to their operation, data processing and data protection.
Get in touch with our team