The Globalization of information and communication technologies (ICT) have caused significant changes in the field of administration and business in the European Union. Currently, the digital economy is driven by modern information systems that offer employees and employers new tools for effective operation. ICT technologies also have an impact on the daily lives of citizens. Introduced on May 25, 2018, the General Data Protection Regulation (GDPR) takes into account the development of technology and the phenomenon of globalization, sensibly regulating the aspects of processing not only personal data, but processing data in general. GDPR has an innovative approach to risk assessment, based on a balance between protection and the free flow of data. The purpose of this article is to present the method of implementing the GDPR in selected companies and administration. The first part of the article presents the underlying assumptions of the GDPR. The next part presents an analysis of the literature and legal regulations on the subject. The last part of the work is focused on presenting the method of implementing the GDPR and a description of selected case studies. The study contains recommendations that are the result of the activities which have been carried out. The conducted activities showed that the best results are obtained in the case of implementation performed by teams composed of IT specialists, lawyers, and managers. Further research may be focused on the verification of the developed method, especially in the area of recommendations and best practices.
No takes yet. Share an insight, caveat, or question.
Zdzisław Pólkowski (2018) studied this question.