Eternity Law International News Compliance GDPR

Compliance GDPR

Published:
April 2, 2020

GDPR COMPLIANCE: REGULATIONS FOR THE EXPORT OF PERSONAL DATA FROM THE EUROPEAN UNION

Compliance with GDPR is an urgent issue, since in recent years, when accessing any Internet resource, active users of the World Wide Web noted a change in privacy policy, as well as an update to this system.

There has also been a change in the type of request to save cookies (cookies) – temporary files and the possibility of using personal data.

This is due to the entry into force of the updated GDPR Regulation (GeneralDataProtectionRegulation) of the European Union No. 2016/679, which applies to all Internet pages from 05.25.2018.

REGULATIONS FOR THE EXPORT OF PD FROM THE EUROPEAN UNION ACCORDING TO THE GDPR REGULATION

The GDPR document sets forth the basic requirements and rules regarding the use of personal data (PD), as well as to all participants in the Regulation.

A very topical issue of the GDPR regarding organizations outside the EU is the requirement for the export (movement) of PD outside the territory of the Union of European States.

The main need to comply with the requirements of the GDPR Regulation is the case when the company acts:

  • PD controller (datacontroller), namely manages his own data bank in the EU;
  • a data processor (dataprocessor), which implies contact with the bank of personal data of members of the European Union.

There are a number of sanctions for non-compliance, so all companies that somehow work with users from the EU are required to adhere to the GDPR.

THE CONCEPT OF “EXPORT OF PD FROM THE EUROPEAN UNION” AND SUBJECTS OF DISTRIBUTION OF GDPR

The movement of PD from the EU countries occurs between the following data import and export entities:

  • from a processor in the European Union – a subprocessor located outside the European Union;
  • from a controller located in the European Union to a processor outside the EU;
  • from the controller in the European Union – to the controller outside the European Union.

PERSONAL DATA EXPORT REGULATION ON GDPR

The fundamental principle of Ch. 5 of the GDPR Regulation on the permitted export of PD outside the EU states that regardless of where the PD is processed, the Regulation guarantees the established level of protection of the rights of individuals.

This regulation fully applies to the countries of the European Economic Area (CES), which in addition to the EU countries include Liechtenstein, Iceland, and Norway.

The export of personal information between the EU and the CES is positioned as the movement of PD across the EU.

WHAT ACTIONS DO THE NON-EUROPEAN WEB RESOURCES WORKING WITH THE RESIDENTS OF THE EUROPEAN UNION TAKE?

Countries that are not in the EU, but are data importers, must be prepared for such requests to be consistent with GDPR rules, without which doing business in the EU will become illegitimate.

Regardless of the location of the data importing country, all GDPR points apply to it regarding the organization of the necessary PD protection measures, as well as the appointment in some situations of a representative in the European Union, and a database protection inspector (DataProtectionOfficer, DPO).

Only after signing a bilateral agreement will it be possible to process PD on the guarantee of an EU controller.

Eternity Law International specialists will assist you in providing legal assistance in establishing compliance of your business structure with GDPR Regulation. Any difficulties can be overcome.

We will tell you which jurisdiction in the EU or outside it to choose to register and conduct your business. We will help you write Privacypolicy and other clauses in accordance with GDPR.

You could be interested

Classification of investment companies in Cyprus

IFD and IFR introduced a new system designed to classify investment firms. This system is based on the activities of such companies, on their size, systemic importance in the overall structure and group partnerships. Therefore, the capital adequacy requirements of CIF will be based on the class of the investment company. The following four categories...

Company registration in Bali

Those wishing to work in the Southeast Asian continent should determine in advance the location of their future corporation. One of the top locations is the Indonesian island of Bali. Although the island is considered an Indonesian`s territory, this island has several rules and requirements for Bali company, which significantly distinguish its possibilities from the...

Asset management license in UK

Such licensing type is available to citizens of all countries of the world. Approval of the right to work with finances in the British jurisdiction is carried out by the FCA. This independent public body has significant authority among local and foreign residents. The UK is one of the most prestigious global jurisdictions, which results...

Corporate services in Ireland

The pace of economic development in Ireland surprises everyone. That is why this country is considered attractive for business registration. Foreign investors who turn to Ireland Corporate Services are also aware of the good conditions regarding taxation in this country. Consulting companies are already ready to provide professional assistance in the registration of a legal...

Corporate taxes in Croatia

Croatia is one of the best nations for the establishment of business because of its economic stability, excellent geographical position, simple process of company registration and, of course, favourable taxation regime. Before starting a business in Croatia every entrepreneur ought to know all subtleties of taxation in commerce activity. Corporate Income Tax in Croatia is...

Why do you need a merchant account?

A merchant account is a specific account that allows you to make payments for goods and services directly on the website of the company. The organization that has registered the merchant receives its own identification code, which helps to allocate it among a huge number of enterprises on the entire planet. This code is present...
Fill the blank:

Zurich

Dreikonigstrasse, 31A, Stockerhof

Kyiv

Baseina street, 7

London

Grosvenor Gardens, 52

Washington

1629 K St. Suite 300 N.W.

Vilnius

Gediminas Avenue, 44A

Tallinn

Kesklinna linnaosa, Tuukri 19

Edinburgh

Lochrin Square, 1

Nicosia

Jacovides Tower, 5 floor

Riga

Esplanade, 7 floor

Hong Kong

18 Harbour Road, 35/F, Central Plaza, Wanchai

Singapore

Level 42, Suntec Tower Three, 8 Temasek Boulevard

Sydney

20 Martin Place

Porto

2609 Avenida da Boavista

Tbilisi

Revaz Tabukashvili Str., N 45, area N 7