{"id":16457,"date":"2023-12-18T14:29:29","date_gmt":"2023-12-18T13:29:29","guid":{"rendered":"https:\/\/compleye.io\/?p=16457"},"modified":"2023-12-18T15:38:47","modified_gmt":"2023-12-18T14:38:47","slug":"10-gdpr-requirements-you-must-know-in-2024","status":"publish","type":"post","link":"https:\/\/compleye.io\/de\/artikel\/10-gdpr-requirements-you-must-know-in-2024\/","title":{"rendered":"10 GDPR-Anforderungen, die Sie im Jahr 2024 kennen m\u00fcssen"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"16457\" class=\"elementor elementor-16457\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d85a30a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d85a30a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-71d2021\" data-id=\"71d2021\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-07d33d5 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"07d33d5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h1><b><span data-contrast=\"none\">10 GDPR-Anforderungen, die Sie im Jahr 2024 kennen m\u00fcssen&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;335551550&quot;:2,&quot;335551620&quot;:2}\">&nbsp;<\/span><\/h1>\n<div><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;335551550&quot;:2,&quot;335551620&quot;:2}\"><br><\/span><\/div>\n<p><span data-contrast=\"none\">The General Data Protection Regulation (GDPR) isn\u2019t just a compliance framework to help you protect personal data &#8211; it\u2019s the law. Adhering to GDPR requirements is an essential aspect of keeping your employees, clients, and customers safe. Here are 10 essential requirements you must know to stay on the right side of GDPR in 2024.&nbsp;<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;335551550&quot;:2,&quot;335551620&quot;:2}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;335551550&quot;:2,&quot;335551620&quot;:2}\"><br><\/span><\/p>\n<p><b style=\"font-size: 35px;\"><span data-contrast=\"none\">Introduction&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\" style=\"font-size: 35px; font-weight: bold;\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134245418&quot;:true}\" style=\"font-size: 35px; font-weight: bold;\"><br><\/span><\/p>\n<p><span data-contrast=\"none\">The current GDPR framework came into effect in the <\/span><b><span data-contrast=\"none\">EU <\/span><\/b><b><span data-contrast=\"none\">in 2018<\/span><\/b><b><span data-contrast=\"none\">.<\/span><\/b><span data-contrast=\"none\"> It promotes lawfulness, transparency, and fairness of data collection and processing, as well as ensuring confidentiality for your clients, and your organisation\u2019s accountability in these processes.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">According to CMS law firm\u2019s Enforcement Tracker Report,<\/span><a href=\"https:\/\/cms.law\/en\/deu\/publication\/gdpr-enforcement-tracker-report\/numbers-and-figures\"> <span data-contrast=\"none\">\u20ac<\/span><span data-contrast=\"none\">2,054,277,662 worth of fines have been issued for GDPR violations during 2023<\/span><\/a><span data-contrast=\"none\">, more than any other year since GDPR was put into practice.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><span style=\"font-size: inherit;\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Complying with GDPR requirements is essential to avoid these hefty penalties. Additionally, and on a lighter note, GDPR compliance helps solidify your organisation as a trustworthy and reliable choice for clients and customers.<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><span style=\"font-size: inherit;\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">If you\u2019re struggling with GDPR compliance or are starting a business, this list contains the most essential GDPR requirements that you should be aware of. We\u2019ve also included some guidance to help you get started.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Remember, if you need any assistance or clarification, <\/span><a href=\"https:\/\/compleye.io\/de\"><span data-contrast=\"none\">Compleye is always here to help<\/span><\/a><span data-contrast=\"none\">.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h2><span data-ccp-props=\"{}\">&nbsp;<br><\/span><b><span data-contrast=\"none\">10 Essential GDPR Requirements&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h2>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><b style=\"font-size: 25px;\"><span data-contrast=\"none\">1. Data Protection Officer (DPO) Appointment<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\" style=\"font-size: 25px; font-weight: bold;\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">A DPO will assist with compliance, inform and guide employees and management on data protection, assist with Data Protection Impact Assessments, and keep in contact with public bodies and data subjects.<\/span><\/p>\n<p><span data-contrast=\"none\">&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">GDPR requirements concerning DPOs can be found in Article 37. These state that an organisation must appoint a DPO if it processes data on a large scale or if it uses that data to monitor individuals.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\"><br><\/span><\/p>\n<p><span data-contrast=\"none\">To find out whether your organisation requires a DPO, you should:<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Consider the nature of your organisation and the industry you operate in&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Evaluate your data processing activities&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Determine the scale of your data processing<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Assess how you use data to monitor, profile and keep track of individuals&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Check with local regulatory bodies&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"6\" data-aria-level=\"1\"><span data-contrast=\"none\">Document your assessments&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"7\" data-aria-level=\"1\"><span data-contrast=\"none\">In certain cases you assign a Privacy Officer in your team<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"8\" data-aria-level=\"1\"><a href=\"https:\/\/compleye.io\/de\/compliance-consulting-services\/\"><span data-contrast=\"none\">Reach out to Compleye for expert help<\/span><\/a><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><b><span data-contrast=\"none\"><br><\/span><\/b><\/p>\n<h3><span data-contrast=\"none\" style=\"\">2.&nbsp;<b>Lawful Basis and Record of Processing Activities<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">GDPR requirements, set out in Article 6, mandate that your organisation must have a recognised reason to process personal data. There are 6 lawful bases for processing personal data:<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"9\" data-aria-level=\"1\"><span data-contrast=\"none\">C<\/span><span data-contrast=\"none\">onsent<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Contract<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Legal obligation<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Vital interests<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Public task<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Legitimate interests<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><span data-contrast=\"none\" style=\"font-size: inherit;\">The legal basis you have will depend on your organisation and the context of your data collection and processing. You may need to select more than one.<\/span><span data-ccp-props=\"{}\" style=\"font-size: inherit;\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\" style=\"font-size: inherit;\"><br><\/span><\/p>\n<p aria-level=\"3\"><span data-contrast=\"none\"><b>Record of Processing Activities&nbsp;<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:360,&quot;335559739&quot;:40,&quot;335559740&quot;:288}\"><b>&nbsp;<\/b><\/span><\/p>\n<p><span data-contrast=\"none\">Article 30 outlines that your organisation\u2019s lawful basis for data collection and processing must be documented in the Record of Processing Activities (ROPA).&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><span style=\"font-size: inherit;\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Your ROPA includes the contact details of your DPO, the categories of individuals whose data you collect and the kind of data you collect from them, the purposes of and lawful basis for data processing, data retention schedules, categories of those who receive personal data, records of transfers to <\/span><a href=\"https:\/\/gdpr-info.eu\/issues\/third-countries\/\"><span data-contrast=\"none\">third countries<\/span><\/a><span data-contrast=\"none\"> and the safeguards in place when doing so.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">3.&nbsp;<b>Consent and Consent Management&nbsp;<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Remember we mentioned that GDPR compliance makes your customers feel more comfortable sharing their data with you? Well, in 2019, DMA found that <\/span><a href=\"https:\/\/dma.org.uk\/uploads\/misc\/gdpr-and-you-2016_consumer-perspective-final.pdf\"><span data-contrast=\"none\">62% of consumers in the UK feel more comfortable about sharing their data with organisations because of GDPR<\/span><\/a><span data-contrast=\"none\">. This is largely due to some of the most important GDPR requirements that pertain to the consent of data subjects.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">According to Articles 7 and 32, your organisation must gain consent from every individual whose data you intend to collect and process. Consent must be:<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Freely given<\/span><\/b><span data-contrast=\"none\"> &#8211; Data subjects must be given a choice as to whether you can process their data, with the option to decline. Consent must be given <\/span><span data-contrast=\"none\">voluntar<\/span><span data-contrast=\"none\">ily.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Informed<\/span><\/b><span data-contrast=\"none\"> &#8211; <\/span><span data-contrast=\"none\">Data subjects must be made aware of what data you will collect, how you intend to use their data, and how they can withdraw their consent. These must be shared using plain language.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">S<\/span><\/b><b><span data-contrast=\"none\">pecific<\/span><\/b><span data-contrast=\"none\"> &#8211; Data subjects should be made aware of your specific data processing intentions depending on how they interact with your organisation. They should be given the option, if possible, to consent to different kinds of data processing.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Unambiguous<\/span><\/b><span data-contrast=\"none\"> &#8211; Your organisation should make it as easy as possible for data subjects to make their choice. A clear \u2018yes\u2019 or \u2018no\u2019 is best. Do not use opt-out options.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Your organisation will need to document who has consented, how and when they consented, and exactly what they consented to. If your purposes for collecting data or&nbsp; intentions for data processing change, consent should be renewed.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Generally, children 16 and under cannot consent to the collection and processing of their data. In these cases, you should seek their parents\u2019 or guardians\u2019 consent with a Parental Consent Form.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">4.&nbsp;<b>Data Subject Rights<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">GDPR requirements under Article 15 state that your business must adhere to the inherent rights of data subjects. These include:<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right of access<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects can view the data you have collected<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right to rectification<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects can correct any mistaken data you hold<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right to erasure<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects can have their data erased and be \u2018forgotten\u2019 from your data storage systems<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right to restriction of processing<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects can request that you collect and store data but not process it<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right to data portability<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects maintain ownership of their data and can use it as they like<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"none\">Right to object<\/span><\/b><span data-contrast=\"none\"> &#8211; Subjects can object to the processing of their data and withdraw consent<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Data subjects can invoke these rights by making a Subject Access Request to your DPO or controller. You must reply to requests within a month and clearly state a timeline for compliance or valid reasons for non-compliance.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">For <\/span><a href=\"https:\/\/compleye.io\/de\/artikel\/the-gdpr-policy-compleyes-advisory-advice\/\"><span data-contrast=\"none\">Compleye\u2019s expert advice on GDPR rights and how to incorporate them into your policies, check out our post here<\/span><\/a><span data-contrast=\"none\">.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">5.&nbsp;<b>Data Minimisation \u2013 <\/b><\/span><b><span data-contrast=\"none\">Privacy by design<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">A significant principle of GDPR compliance is data minimisation. As you may be able to guess, this means your organisation should minimise the amount of data it collects from individuals. <\/span><span data-contrast=\"none\">Your engineering team can adopt <\/span><a href=\"https:\/\/en.wikipedia.org\/wiki\/Privacy_by_design\"><span data-contrast=\"none\">Privacy by design<\/span><\/a><span data-contrast=\"none\"> to ensure data minimisation<\/span><span data-contrast=\"none\">.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">You should only collect types of data that are necessary to your processing aims, and you should be able to prove that the data you\u2019re collecting is relevant to these aims. Additionally, you should regularly review the data you hold and erase what you no longer need. <\/span><span>&nbsp;<br><\/span><span>&nbsp;<\/span><br><\/p>\n<h3><span data-ccp-props=\"{}\">&nbsp;6.&nbsp;<\/span><b><span data-contrast=\"none\">Data Protection Impact Assessments (DPIAs)&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Conducting DPIAs is among the most important GDPR requirements. If you intend to process data in a way that may infringe on the rights and freedoms of your data subjects, you will need to carry out a DPIA before you begin to process data.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">For example, if you intend to systematically monitor individuals using sensitive data like biometric information or criminal records, your data controller will need to conduct a DPIA. You should store your DPIA internally, but be prepared to share it with regulatory bodies if a request is made. More info about DPIAs can be found in GDPR Article 35.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">DPIAs describe your processing intentions, assess the necessity of the processing, explain how you will apply data minimisation, describe and qualify any risks, put controls in place to mitigate these risks, and document the advice of your DPO if you have one.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">7.&nbsp;<b>Security Measures&nbsp;<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">A 2020 report by RSM found that <\/span><a href=\"https:\/\/assets.publishing.service.gov.uk\/media\/5f294433d3bf7f1b18aaad27\/Impact_of_GDPR_on_cyber_security_outcomes.pdf\"><span data-contrast=\"none\">52% of board members surveyed believed GDPR had led to increased investment in their organisation\u2019s cybersecurity<\/span><\/a><span data-contrast=\"none\">. This is because GDPR also mandates that data should be protected from destruction, loss or theft.<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Determine what security measures your organisation will need to put in place and document these in an Information Security Policy. These security measures may be:&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">P<\/span><span data-contrast=\"none\">seudonymisatio<\/span><span data-contrast=\"none\">n&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Data encryption&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Firewalls<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Access controls&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Authentication mechanisms&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"6\" data-aria-level=\"1\"><span data-contrast=\"none\">Confidentiality and processing training&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">You should conduct regular security audits to check the resilience of your data storage and processing systems. You will also need to make sure that data is retrievable and accessible following a breach. You can find out more in GDPR Article 32.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p aria-level=\"3\"><b><span data-contrast=\"none\">Data Transfers&nbsp;<\/span><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:360,&quot;335559739&quot;:40,&quot;335559740&quot;:288}\">&nbsp;<\/span><\/b><\/p>\n<p><span data-contrast=\"none\">Your organisation can transfer data to a third country or another organisation so long as appropriate safeguards are in place. You will need to ensure, preferably contractually, that the receiving organisation does not infringe on the rights of your data subjects.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Transferred data must be stored correctly and for a minimum amount of time, and no unnecessary data should be processed. Finally, you must inform subjects of any organisations with whom you have shared their data and why.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><a href=\"https:\/\/compleye.io\/de\/artikel\/top-3-tips-for-privacy-gdpr-frameworks\/\"><span data-contrast=\"none\">Here\u2019s a little more information about GDPR and privacy from Compleye\u2019s compliance team<\/span><\/a><span data-contrast=\"none\">.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">8.&nbsp;<b>Notification of Data Breaches<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Following on from GDPR requirements concerning data security, the framework also mandates that any breach of data resulting in a risk to the rights and freedoms of data subjects be reported to a relevant body, usually within 72 hours.<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><a href=\"https:\/\/gdpr-info.eu\/art-4-gdpr\/\"><span data-contrast=\"none\">GDPR Article 4 defines a data breach as<\/span><\/a> <i><span data-contrast=\"none\">\u201c<\/span><\/i><i><span data-contrast=\"none\">a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.\u201d<\/span><\/i><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">According to Article 33, your Data Breach Notification Form to the Supervisory Authority should include:&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">The type of breach (destruction, alteration, loss etc.)<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">The approximate number of subjects affected<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">The categories of data affected&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">The consequences, both apparent and assumed, of the data breach&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Measures taken to mitigate the consequences&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Measures taken to restore access to data<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">The contact details of your DPO<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Reasons for any delays in notification (if applicable)&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"none\">If you have determined that the data breach could affect the rights and freedoms of your data subjects, notify those individuals of the breach and your subsequent mitigating measures as soon as possible with a Data Breach Notification Form to Data Subjects.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">9.&nbsp;<b>Employee Training&nbsp;<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Although there is no explicit requirement within the GDPR compliance framework for employee training, compliance is made much easier with informed employees.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Employee GDPR training should cover:&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Current standards for data protection&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Data Subject Rights&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"6\" data-aria-level=\"1\"><span data-contrast=\"none\">Where and how data is stored&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"7\" data-aria-level=\"1\"><span data-contrast=\"none\">Who can access data and when<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"8\" data-aria-level=\"1\"><span data-contrast=\"none\">How to handle requests for information<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"9\" data-aria-level=\"1\"><span data-contrast=\"none\">Data Breach Response Procedures<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"10\" data-aria-level=\"1\"><span data-contrast=\"none\">Any other internal GDPR compliance processes&nbsp;&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"11\" data-aria-level=\"1\"><span data-contrast=\"none\">How employees can reach out to controllers or a DPO<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"none\">Employee training should be given to new starters before they begin working with subjects\u2019 data, and refreshers should be given at least annually.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h3><span data-contrast=\"none\" style=\"\">10.&nbsp;<b>Other Documentation&nbsp;<\/b><\/span><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h3>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Aside from the documents already mentioned in this article, there are several other documents your organisation will need to create, maintain, review and update when necessary. These include but are not limited to:&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Personal Data Protection Policy<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Richtlinie zur Datenaufbewahrung<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Supplier Data Processing Agreement<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Privacy Notice&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"4\" data-list-defn-props=\"{&quot;201340374&quot;:2,&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:196,&quot;335559991&quot;:196,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Employee Privacy Notice<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"none\">Many of these documents will be shared with your data subjects, so ensure they\u2019re written in plain language.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">Need help with creating compliant GDPR documentation? Compleye is here to advise and help you revise. <\/span><a href=\"https:\/\/compleye.io\/de\/gdprpackage\/\"><span data-contrast=\"none\">Check out our GDPR package for more information.<\/span><\/a><span data-contrast=\"none\">&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<h2><b><span data-contrast=\"none\">In Conclusion\u2026&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true}\">&nbsp;<\/span><\/h2>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">GDPR is a comprehensive yet complex legal framework. As a result, compliance means adhering to a variety of equally comprehensive yet complex requirements.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">With the simplifications of the most important GDPR requirements listed above, you can get to work understanding GDPR and implementing measures to adhere to the regulation.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">GDPR compliance takes time, effort, resources, money, and a commitment from all employees in your organisation and third parties you work with. But, compared to the penalties your organisation can face for non-compliance, it\u2019s definitely worth it.&nbsp;<\/span><span data-ccp-props=\"{}\">&nbsp;<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>10 GDPR Requirements You Must Know In 2024&nbsp;&nbsp; The General Data Protection Regulation (GDPR) isn\u2019t just a compliance framework to help you protect personal data &#8211; it\u2019s the law. Adhering to GDPR requirements is an essential aspect of keeping your employees, clients, and customers safe. Here are 10 essential requirements [&hellip;]<\/p>","protected":false},"author":17,"featured_media":16466,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16457","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lean"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>10 GDPR Requirements You Must Know In 2024<\/title>\n<meta name=\"description\" content=\"Stay compliant and safeguard your customers&#039; privacy with our guide to the latest GDPR requirements for 2024.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/de\/artikel\/10-gdpr-requirements-you-must-know-in-2024\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"10 GDPR Requirements You Must Know In 2024\" \/>\n<meta property=\"og:description\" content=\"Stay compliant and safeguard your customers&#039; privacy with our guide to the latest GDPR requirements for 2024.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/de\/artikel\/10-gdpr-requirements-you-must-know-in-2024\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-18T13:29:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-18T14:38:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1706\" \/>\n\t<meta property=\"og:image:height\" content=\"1416\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschrieben von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"9\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"10 GDPR Requirements You Must Know In 2024\",\"datePublished\":\"2023-12-18T13:29:29+00:00\",\"dateModified\":\"2023-12-18T14:38:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/\"},\"wordCount\":2152,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg\",\"articleSection\":[\"Compleye Lean Compliance Designers\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/\",\"name\":\"10 GDPR Requirements You Must Know In 2024\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg\",\"datePublished\":\"2023-12-18T13:29:29+00:00\",\"dateModified\":\"2023-12-18T14:38:47+00:00\",\"description\":\"Stay compliant and safeguard your customers' privacy with our guide to the latest GDPR requirements for 2024.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg\",\"width\":1706,\"height\":1416},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/10-gdpr-requirements-you-must-know-in-2024\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"10 GDPR Requirements You Must Know In 2024\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/de\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"10 GDPR Requirements You Must Know In 2024","description":"Stay compliant and safeguard your customers' privacy with our guide to the latest GDPR requirements for 2024.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/de\/artikel\/10-gdpr-requirements-you-must-know-in-2024\/","og_locale":"de_DE","og_type":"article","og_title":"10 GDPR Requirements You Must Know In 2024","og_description":"Stay compliant and safeguard your customers' privacy with our guide to the latest GDPR requirements for 2024.","og_url":"https:\/\/compleye.io\/de\/artikel\/10-gdpr-requirements-you-must-know-in-2024\/","og_site_name":"compleye.io","article_published_time":"2023-12-18T13:29:29+00:00","article_modified_time":"2023-12-18T14:38:47+00:00","og_image":[{"width":1706,"height":1416,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg","type":"image\/jpeg"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Geschrieben von":"Karolin Kruiskamp","Gesch\u00e4tzte Lesezeit":"9\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"10 GDPR Requirements You Must Know In 2024","datePublished":"2023-12-18T13:29:29+00:00","dateModified":"2023-12-18T14:38:47+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/"},"wordCount":2152,"commentCount":0,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg","articleSection":["Compleye Lean Compliance Designers"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/","url":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/","name":"10 GDPR Requirements You Must Know In 2024","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg","datePublished":"2023-12-18T13:29:29+00:00","dateModified":"2023-12-18T14:38:47+00:00","description":"Stay compliant and safeguard your customers' privacy with our guide to the latest GDPR requirements for 2024.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/12\/ellie-ellien-04yMqTmUeHQ-unsplash-scaled-e1702906510325.jpg","width":1706,"height":1416},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/10-gdpr-requirements-you-must-know-in-2024\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"10 GDPR Requirements You Must Know In 2024"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/de\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/comments?post=16457"}],"version-history":[{"count":24,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16457\/revisions"}],"predecessor-version":[{"id":16484,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16457\/revisions\/16484"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/media\/16466"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/media?parent=16457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/categories?post=16457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/tags?post=16457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}