{"id":2631,"date":"2020-11-30T18:01:54","date_gmt":"2020-11-30T17:01:54","guid":{"rendered":"https:\/\/merlinleonard.com\/en\/?p=2631"},"modified":"2023-10-03T17:23:20","modified_gmt":"2023-10-03T15:23:20","slug":"gdpr-is-2-years-old-taking-stock-and-setting-up-the-preference-center","status":"publish","type":"post","link":"https:\/\/merlinleonard.com\/en\/gdpr-is-2-years-old-taking-stock-and-setting-up-the-preference-center\/","title":{"rendered":"GDPR is 2 years old: quick review and setup of the preference center"},"content":{"rendered":"

2 years after the implementation of the GRPD (RGPD in French) by the European Commission, it’s already time to take stock. In France, the CNIL is responsible for overseeing the implementation of the General Data Protection Regulation, which is now mandatory throughout all the European Union.<\/p>\n

If today’s citizens seem more informed than ever about their rights in terms of privacy and personal data, what’s the status of the implementation of the RGPD law and the preference center in companies? Merlin\/Leonard sheds some light…<\/p>\n

Where do we stand with GRPD in 2020?<\/h2>\n
\n
\"RGPD<\/figure>\n<\/div>\n

As you know, this year the GRPD celebrates its second anniversary and the European Commission drew up a rather positive initial assessment a few months ago. But before we go on reassure us, you all have the definition of GRPD in mind don’t you?<\/p>\n

For the record, this is the General Data Protection Regulation<\/strong> drawn up in 2018 by the member states of the European Union. Let’s take a look together at some of the highlights, just over 2 years after the RGPD law came into force.<\/p>\n

Citizens and businesses better aware<\/h3>\n

30 months after its implementation by the European Commission, the GRPD already seems to be well entrenched in the practices and minds of web users. Proof of this is the 27% increase in complaints to the CNIL in 2019<\/a>, which already followed an initial remarkable 32.5% increase in 2018.<\/p>\n

Today, the RGPD is setting itself up as a real model, since it has already crossed Europe’s borders to be adapted by several foreign countries, located outside the European Union. California is a case in point.<\/p>\n

In fact, Mark Zuckerberg himself extolled its virtues in a recent video published by CERRE<\/a>. The last straw! In any case, it’s indicative of the unprecedented impact of the General Data Protection Regulation at global level.<\/p>\n

Many French companies are redoubling their efforts to comply with the GRPD (RGPD). For example, personal data protection officers, or DPOs, are becoming more and more common in companies. But there are still real questions today about data security or the practical implementation of the regulation, particularly for SMEs.<\/p>\n

\n
\"securisation<\/figure>\n<\/div>\n

SMEs: when GRPD (RGPD) rhymes with impassable pass (or almost)<\/h3>\n

After Google or British Airways were sentenced to record fines of several million euros, the major groups have stepped up the pace. On the SME side on the other hand, many are still lagging behind when it comes to RGPD compliance. It can even be a real headache for start-ups or small companies that have neither a legal department nor the means to pay an external service provider.<\/p>\n

Lack of time, lack of staff but also lack of budget. Implementing European regulations on personal data protection requires numerous investments that not all companies can afford.<\/p>\n

The DPO: new guardian of the GRPD (RGPD) consecrated by containment<\/h3>\n

What if we told you that Covid-19 hasn’t only had negative impacts on companies and their development!<\/p>\n

In fact, containment has been an extremely propitious period for GRPD (RGPD) compliance in companies. So according to Data Legal Drive<\/a>, nearly 40% of DPOs took advantage of the containment to take the issue of personal data management head on, placing updating the brand-new register of processing at the top of the list.<\/p>\n

But by the way: what’s a DPO? Well, it’s simply the data protection officer. He or she is responsible for the protection of personal data in companies and public bodies. By 2019, nearly 64,900 organizations had designated their DPO.<\/p><\/blockquote>\n

RGPD: but then what actions to put in place?<\/h3>\n
\n
\"\"<\/a>
<\/figcaption><\/figure>\n<\/div>\n

Now rest assured, because when it comes to GRPD nothing is totally insurmountable. To take action without delay, simply follow the 4 steps detailed by the CNIL:<\/p>\n

    \n
  1. Create a data processing register: this document lists the various categories of personal data processed. It allows you to define what they are used for, who can consult them, who you communicate them to and how long they are stored. As a company director, you have full responsibility for this register! With Marketo, this is done automatically.<\/li>\n
  2. Sort through the personal data collected: once you’ve set up your register, you’ll be able to sort through all the data you collect on a daily basis. This is the time to check whether the data exploited is really necessary for your business, whether you handle sensitive data or whether the data collected is secure and kept for a limited period of time.<\/li>\n
  3. Respect people’s right to privacy: with the GRPD, every time you collect data, you must inform the user of the purpose of the collection and its legal basis. You are obliged to explain who accesses their data and how long it is kept. Finally, you must inform users of their rights in terms of personal data protection, the right to privacy and the right to be forgotten.<\/li>\n
  4. Secure personal data: this is one of the major challenges of the GRPD and you must redouble your vigilance to guarantee total security of personal data. Antivirus, software updates, data encryption, complex passwords, you must never skimp on the means.<\/li>\n<\/ol>\n

    What if the GRPD preference center (Centre de Pr\u00e9f\u00e9rences RGDP) became your workhorse?<\/h2>\n

    Mandatory under European law for over 2 years now, the preference center is one of the provisions of the GRPD law, the General Data Protection Regulation. This form enables better privacy protection and greater security for data shared by users, notably by introducing the consent dimension. Discover now the advantages of the preference center for companies and users.<\/p>\n

    But why a preference center (PC)?<\/h3>\n

    What if we told you that even more than a constraint, the PC can become a real ally<\/a>. PC contributes to the development of a bond of trust with your customers and prospects. But that’s not all!<\/p>\n

    Thanks to the RGPD preference center, you’ll be able to easily :<\/p>\n