Practical Implications of the New EU General Data Protection Regulation For EU- and Non-EU Companies

35 Pages Posted: 6 May 2018

See all articles by Douwe Korff

Douwe Korff

Oxford Martin School - Global Cyber Capacity Centre; Eur. Univ. Viadrina - Centre for Internet & Human Rights; Yale University - Information Society Project; London Metropolitan University

Date Written: August 1, 2016

Abstract

This paper explains the practical steps that organisations – in particular private companies – that will be subject to the General Data Protection Regulation (GDPR) will have to take, not just to comply, but also to be able to “demonstrate compliance”, with the Regulation – a new explicit requirement, closely linked to the new "accountability" principle.

It does not deal with the substantive requirements of the Regulation, or with the question of the material and territorial scope of the Regulation.

Keywords: EU, Data Protection, Privacy, GDPR

Suggested Citation

Korff, Douwe, Practical Implications of the New EU General Data Protection Regulation For EU- and Non-EU Companies (August 1, 2016). Available at SSRN: https://ssrn.com/abstract=3165515 or http://dx.doi.org/10.2139/ssrn.3165515

Douwe Korff (Contact Author)

Oxford Martin School - Global Cyber Capacity Centre ( email )

University of Oxford
34 Broad Street
Oxford, OX1 3BD
United Kingdom

Eur. Univ. Viadrina - Centre for Internet & Human Rights ( email )

Grosse Scharrnstr. 59
Frankfurt (Oder), Brandenburg 15230
Germany

Yale University - Information Society Project ( email )

P.O. Box 208206
New Haven, CT 06520-8206
United States

London Metropolitan University ( email )

London
United Kingdom

Do you have negative results from your research you’d like to share?

Paper statistics

Downloads
253
Abstract Views
972
Rank
221,700
PlumX Metrics