Page 18 - Social_Social justice2

18

Chapter 4 Personal data protection

4.1 GDPR

The GDPR (General Data Protection Regulation) is the new EU regulation on personal data protection
which entered into force on 26 May 2018. The regulation was adopted on 27 April 2016, after a two-year
transition period it became effective in EU member states. It replaced Directive 95/46/EC.

The main motive for the introduction of RODO into the territory of the European Union was the desire to
increase the effectiveness of personal data protection as a fundamental right provided for, among others,
in the Charter of Fundamental Rights (Article 8) and the Treaty on the Functioning of the EU (Article 16), on
the other hand, the need to adapt EU legal regulations to the needs resulting from the continuous
development of new technologies and progressive digitalization. 1

The main objective is to bring order to the personal data protection rules in all EU Member States. These
rules apply to all entities that process personal data in the EU. The GDPR regulates and protects personal
data of all citizens, regardless of the technology used to process them. No matter how the data is stored (in
an IT system, by video or on paper), in all cases personal data are subject to the protection requirements of
the GDPR.

“Stronger rules on data protection means that:

• citizens have control over where and to whom their personal data are made available
• businesses benefit from a level playing field” 2

Examples of personal data:

• Name and Surname
• Email address
• Location data
• Home address
• Identification card number
• Phone number
• A cookie ID

1 https://biznesalert.pl/zmienia-nowe-rozporzadzenie-o-ochronie-danych-osobowych/
2 https://ec.europa.eu/info/law/law-topic/data-protection/eu-data-protection-rules_en