Implementation of the GDPR in Practice
Posted: Thu Jan 30, 2025 10:05 am
The GDPR has been in place for about three months now. And it feels like most companies have come to terms with it. But even if you had fulfilled all the requirements for the GDPR by the deadline, that is no guarantee that you won't hear anything about the GDPR for the next five years, let alone about data protection. Because nothing in our modern world is as constant as inconsistency. Under the motto "10 points for certain failure", Martin Aschoff has compiled the most important facts here so that you can live in harmony with data protection in the long term. We hope you enjoy our ironic 10-point GDPR checklist.
Our recommendations for safe failure
1. Read but do not question or check
10 Points GDPR Checklist - Just read and don't look at the algeria number dataset law or use a lawyerThe strategy of simply doing what you have read somewhere or what self-proclaimed experts recommend can quickly be doomed to failure. There are now plenty of reports and instructions for the GDPR. Unfortunately, there are many half-truths and myths among them. It can quickly happen that you have read five articles and are just as wise as before because each article says something different or makes a different recommendation. In addition, certain places, such as consultants and law firms, deliberately create a certain amount of panic in order to secure their business for the foreseeable future.
But how do you know what is true and what is not? First of all, you should check where certain articles and recommendations come from. Online articles in particular are often not first-hand information, but rather contributions from larger media outlets. It can quickly happen that a connection is no longer presented quite correctly. Therefore, if possible, you should always read the primary source. And don't forget the credibility of the source. A specialist magazine is certainly more competent than the newspaper with the four capital letters. If you have a law firm competent in this field on call, you are sure to get the most reliable answers. Another option is to exchange ideas with other affected parties (companies). What kind of experiences have they had? How did they approach the matter? This way you can benefit from the experiences of others.
2. My lawyer is taking care of the issue
10 point checklist GDPR - my lawyer takes care of itOf course, you can give your lawyer the most important things to check, but the GDPR is not just an issue that the lawyer can handle alone. On the one hand, the expert lawyers are currently very busy, which can lead to delays. On the other hand, you may receive recommendations that are not compatible with your company's practices or that go further than necessary. The GDPR issue must also be implemented throughout the entire company. This starts with the fact that no customer data may be left lying around in the open or personal data may be sent unencrypted by email. Your lawyer cannot do this for you.
Our recommendations for safe failure
1. Read but do not question or check
10 Points GDPR Checklist - Just read and don't look at the algeria number dataset law or use a lawyerThe strategy of simply doing what you have read somewhere or what self-proclaimed experts recommend can quickly be doomed to failure. There are now plenty of reports and instructions for the GDPR. Unfortunately, there are many half-truths and myths among them. It can quickly happen that you have read five articles and are just as wise as before because each article says something different or makes a different recommendation. In addition, certain places, such as consultants and law firms, deliberately create a certain amount of panic in order to secure their business for the foreseeable future.
But how do you know what is true and what is not? First of all, you should check where certain articles and recommendations come from. Online articles in particular are often not first-hand information, but rather contributions from larger media outlets. It can quickly happen that a connection is no longer presented quite correctly. Therefore, if possible, you should always read the primary source. And don't forget the credibility of the source. A specialist magazine is certainly more competent than the newspaper with the four capital letters. If you have a law firm competent in this field on call, you are sure to get the most reliable answers. Another option is to exchange ideas with other affected parties (companies). What kind of experiences have they had? How did they approach the matter? This way you can benefit from the experiences of others.
2. My lawyer is taking care of the issue
10 point checklist GDPR - my lawyer takes care of itOf course, you can give your lawyer the most important things to check, but the GDPR is not just an issue that the lawyer can handle alone. On the one hand, the expert lawyers are currently very busy, which can lead to delays. On the other hand, you may receive recommendations that are not compatible with your company's practices or that go further than necessary. The GDPR issue must also be implemented throughout the entire company. This starts with the fact that no customer data may be left lying around in the open or personal data may be sent unencrypted by email. Your lawyer cannot do this for you.