The EU General Data Protection Regulation (GDPR) will enter into force next May 2018. The GDPR has been designed to protect all EU citizens from privacy and data breaches in an increasingly data-driven world. The GDPR will harmonize data privacy laws across Europe and reshape the way companies across the region approach data protection. 

The GDPR will affect not only organisations operating in the EU; but also organisation located outside the EU that target consumers in the EU, monitor EU citizens or offer goods or services to EU consumers (even if for free).

The key changes introduced by the GDPR relate to:

Scope of application / Extra-territoriality: the GDPR will apply to all companies processing the personal data of data subjects residing in the European Union, regardless of the company’s location.

Penalties:under GDPR organizations in breach of GDPR can be fined up to 4% of annual global turnover or € 20 Million (whichever is greater). 

Consent: the request for consent for the treatment of personal data must be given in an intelligible and easily accessible form

Privacy by Design: the GDPR provides that appropriate technical and organisational measures shall be implemented from the onset of the designing of systems, rather being an additional measure.

Data Protection Officers: the GDPR provides for internal record keeping requirements and Data Protection Officier (DPO) appointment will be mandatory only for those controllers and processors whose core activities consist of processing operations which require regular and systematic monitoring of data subjects on a large scale or of special categories of data or data relating to criminal convictions and offences. 

To help companies get ready for the GDPR, Santosuosso Avvocati has launched the GDPR Compliance Project. The Project is addressed to both EU and extra-EU companies and aims to assist companies to comply with the obligations imposed by the GDPR, avoid penalties and retain customer trust and business reputation in the EU and Worldwide.


For further information, please contact us by using the form.