Can we just get away with not being GDPR compliant? Who will check anyway, right? Careful! The GDPR is a European wide regulation with Data Protection Authorities in every EU country that are easily accessible by all.
In the past, we may have felt that other privacy rules haven’t been enforced. The reality is however that they have been enforced. Here’s an example: a lady in Norway published a blog on her church website about a congregation member falling and breaking his foot. This was deemed private medical data. And believe it or not, she got fined.
Claiming “innocence” and no knowledge will not protect you. The onus is on you handling personal data to adhere to the new rules thanks to the accountability principle in the GDPR.
GDPR has very clear rules and consequences outlined. The fines are steep: up to EUR 20 million or 4% of your company’s global turnover of the previous financial year, whichever is higher. Ouch...let’s not risk that!
Avoid the risk of getting fined by learning how to implement the GDPR.