Eternity Law International News General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR)

March 3, 2020

The General Data Protection Regulation (GDPR) is the EU Regulation No. 2016/679 dated 04/27/2016 “On the protection of individuals with regard to the processing of personal data and their free movement” and the repeal of the Directive on General Data Protection Provisions of the European Union No. 95/46.

This algorithm began to operate on May 25, 2016 and is fundamental for use in the countries of the European Union.

All EU member states that take into account the personal data of individuals – members of the European Union when selling or offering them various services or products.

As well as those who monitor the behavior of the subject of these in the vastness of the EU.

These aspects take into account the following aspects:

  • Information is displayed in one of the languages;
  • fixed value in Euro currency;
  • users from the European Union are mentioned.


The updated GDPR document denotes such concepts as “controller” (English controller) and “processor” (English processor) of personal data.

An individual or legal entity, the state, as well as any government agency or organization that, individually or in combination with others, forms the purpose and methods of processing PD is a “controller”.

This entity has the following responsibilities:

  • keep records of reports;
  • if the situation requires it, cooperate with personal data processors;
  • introduce technology to protect personal information;
  • evaluate interactions between the processing of personal data and the rights of subjects for certain types of processing;
  • try to send a notification to the national Data Protection Authority (DataProtectionAuthorities) within 72 hours about the leak of PD, as well as the subjects of this data.

A legal entity or an individual, a state, or a separate body that processes personal information on behalf of and on a control order is a “processor”. His direct responsibilities are:

  • the introduction of a written register of ongoing transactions that are performed on behalf of or on a control order;
  • dispatch of a data leak notification to the controller in a timely manner;
  • active participation in cross-border information transfer activities;
  • in certain situations, the requirement to appoint a representative in the EU, if this was not initially the case.


The EU document applies to all companies that collect, store or process personal data of members of the European Union (i.e. processors and controllers), regardless of the location of these entities.

These Regulations prohibit the movement of personalized data of EU members outside of it, threatening the application of sanctions.

As of April 2018, the European Commission recognizes those countries that do not have an adequate level of PD protection: New Zealand, Guernsey, Uruguay, Switzerland, Liechtenstein, Norway, Iceland, Andorra, South Korea, Argentina, Canada, Israel, Fr. Maine, Faroe Islands, Japan. USA.


The main principle of the Regulation is if it is not possible to force the processor or controller of personal data in a particular country to bear the responsibility that is provided for in the Regulation, then all operations with PD of members of the European Union will be illegitimate.


The main innovations include:

  • regulation of the procedure for obtaining permission from users to process personal data at the time of their receipt, the procedure for abduction and many other rights;
  • in the case when the scope of processing PD is quite voluminous (from 5,000 records and 250 employees), the GDPR has the right to require the processor and controller to create the position of inspector for the protection of interests and personal data;
  • GDPR requirement to create a protection system, as well as technical regulations for the protection of PD;
  • the user acquires the right to file a complaint with a supervisory authority in any EU country for the protection of PD. In this case, the text to the police must have information about his location and contacts;
  • GDPR requirements – to appoint a permanent processor in the EU if the project owner is not in the EU and conducts various data operations regularly.


The GDPR provides for substantial sanctions for non-compliance with the processing rules for PD of current residents of the European Union. The fine is estimated at about 20 million Euros, or 4% of the total financial turnover of the corporation).

These requirements are not limited to the limits of the established non-disclosure policy of the Internet resource.


To fully align your company with GDPR rules, we recommend the following:

  • develop the Privacypolicy section, taking into account the requirements of the GDPR;
  • comply with the requirements of state legislation on the protection of PD, as well as receiving information from the local relevant authority;
  • appoint an inspector for protection of PD;
  • create an alert system and user agreements by conducting an audit;
  • implement and describe a system of technical support and protection of PD, regulating them in the internal documentation);
  • in order to avoid disagreements with the new regulation, it is recommended to transfer the ownership of the company (or project) to a member of one of the EU countries.

Eternity Law International experts will assist you in analyzing your Internet resource for compliance with GDPR requirements, draw up the correct Privacypolicy, and also advise you on individual legal issues.

You could be interested

Antigua and Barbuda Forex License

The offshore jurisdiction of Antigua and Barbuda has gained fame in two global areas and commercial aspects at once. In particular, the state has become known throughout the world as the center of online gambling, and has received the status of a jurisdiction that offers an excellent and very profitable program for businessmen to obtain...

Cyprus Investment Firm – Regulation in Cyprus

The law-based mechanism for the supply of investing services has been set up by Cyprus law 87(I)/2017. As a result, derivatives using cryptocurrencies as their underlying asset are now expressly recognized as financial products and covered by the law. Such an amendment happened after the European Securities and Markets Authority (ESMA) recognized CFDs on cryptocurrencies...

Company registration in Italy

Italy is a European country that has always been and remains attractive to entrepreneurs. This state is not a standard offshore, however, it offers no less favorable business conditions. Having a representative office in Italy is a sign of the company’s reliability and that it is respected in certain circles. The most popular company forms...

Peculiarities of doing business in Hungary

What features about doing business in Hungary you should know? Like the major part of the nations in Central and Eastern Europe, Hungary has rather effective systems in place to draw in money, including international investors. Additionally, it is a good place for commerce activity since it provides the lowest corporation tax in the whole...

VASP license in Hong Kong

On June 24, 2022, jurisdiction governmental authorities released Anti-Money-Laundering and Terrorist-Financing (AML/FT) Order; it established licensing and regulatory norms demanding to possess VASP license in Hong Kong. Let us consider it in more detail and find out how it affects firms operating in this industry. The draft law amended the AML and CFT Order, main...

Blockchain application development

Let’s start with what blockchain is. Blockchain is an innovative system for storing and transmitting data in the form of sequential chains, consisting of blocks of transactions. These blocks are added to a single information base, which is automatically updated after each new transaction is made. Simply put, the blockchain is a database that simultaneously...
Fill the blank:


Dreikonigstrasse, 31A, Stockerhof


Baseina street, 7


Grosvenor Gardens, 52

New York

1178 Broadway, 3rd Floor #3353 New York, NY 10001


Gediminas Avenue, 44A


Kesklinna linnaosa, Tuukri 19


Lochrin Square, 1


Jacovides Tower, 5 floor


Esplanade, 7 floor

Hong Kong

18 Harbour Road, 35/F, Central Plaza, Wanchai


Level 42, Suntec Tower Three, 8 Temasek Boulevard


20 Martin Place


2609 Avenida da Boavista


Revaz Tabukashvili Str., N 45, area N 7