In the European Union (“EU”) countries, the General Data Protection Regulation (“GDPR”) has been enacted to regulate data collection by IoT and Information Technology Developers and Third-Party Users.
The GDPR is a new set of rules designed to give EU citizens more control over their personal data. It aims to simplify the regulatory environment for business so both citizens and businesses in the European Union can fully benefit from the digital economy.
Personal data is at the core of GDPR. In general, this is information that allows a live individual to be recognized directly or indirectly from publicly available data. Names, addresses, and unambiguous online usernames are all examples of personal information. Personal data can also include information that is less obvious, such as IP addresses and cookie IDs. There are a few unique kinds of sensitive personal data that are given additional safeguards under GDPR. Information regarding racial or ethnic origin, political ideas, religious beliefs, trade union membership, genetic and biometric data, and health information are all examples of personal data.
GDPR also applies to enterprises situated outside of the EU. GDPR may apply if a Nigerian company does business in the EU, as well as if the data controller is a citizen of an EU nation-state.
The GDPR is built on seven main principles outlined in Article 5 of the Act, which are intended to regulate how people’s data is treated. Lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality (security); and accountability are the seven principles of GDPR.
While data controllers and processors face the most severe penalties under GDPR, the regulation is intended to safeguard people’ rights.
To continue reading and/or download the full Data Subjects and the Liability ff IoT Products for Unlawful Access to Digital Footprint publication, Kindly use the buttons below