Policy guides

Google fined €50 million for first major violation of GDPR

Google has been fined almost €50 million ($57m) by French regulators for violating Europe’s strict data-privacy rules. The fine marks the first major penalty brought against a U.S. technology giant since the General Data Protection Regulation (GDPR) took effect in May 2018. Under the regulation, users must be given a full, clear picture of the data collected, along with simple, specific tools for users to consent to having their personal information harnessed.

Direktiva NIS za varnost omrežij in informacij – vodič in pogosta vprašanja

Direktiva za varnost omrežij in informacij (NIS – Network and Information Security) je poenotila uredbe o kibernetski varnosti na nivoju celotne Evropske Unije.
Veljati je začela avgusta 2016. Države članice imajo za izvajanje Direktive in vpeljevanje v nacionalno zakonodajo na voljo 21 mesecev in 5 dodatnih mesecev za identifikacijo administratorjev kritične infrastrukture.

Direktiva želi zagotoviti visoko raven varnosti omrežij in informacij v EU. Cilji Direktive so naslednji:

Commission's top scientific advisers publish opinion on cybersecurity in the Digital Single Market

On Friday, 24 March 2017, the High Level Group of the Commission's Scientific Advice Mechanism (SAM) has published a new scientific opinion on cybersecurity in the Digital Single Market, following the request of the Commission Vice-President Andrus Ansip.

In this Opinion, the Group makes a number of recommendations for policy action to make it easier and safer for people and businesses to operate online in the EU.

The opinion includes recommendations:

Key changes with GDPR

The GDPR will come into force from 25 May 2018 when it will replace the existing EC Data Protection Directive, bringing new legal rights for individuals, extending the scope of responsibilities for data controllers and processors and enhancing the regime for enforcement to include the risk of fines at up to 4% of an organisation's worldwide annual turnover.
The new regulation is in fact a major change in privacy and data protection, with many areas to be affected.