DSGVO – Panic?! Why the scaremongering around the GDPR is unfounded.

by | 22.12.2017 | Privacy | 0 comments

New: Short video

My colleague from Mission 100, Michael Erner, and I* decided a while ago to declare war on the scaremongering surrounding the GDPR. What has been communicated and distributed by many consultants, lawyers and auditing firms for about a year and a half now knocks the bottom out of every barrel. The FUD (Fear, Uncertainty, Doubt) principle is used without restraint, without knowing the open questions surrounding the implementation of the GDPR, let alone addressing them.

What is written on paper does not necessarily have to be implemented that way! The very fact that we are dealing with a mesh of different legal systems that are neither coordinated nor free of contradictions should tell the practitioner that implementation will be quite hairy. It gets even more difficult when you look at implementation in terms of conformity assessments. While today each country, state, canton, … had its own supervisory authority and these also autonomously carry out audits at their own discretion, now from May 2018 EU far suddenly everything should be clear and uniform! Of course, this is not the case. The supervisory authorities are currently trying to coordinate with a view to harmonizing implementation, and this will be more or less successful. It will hardly lead to a uniform practical interpretation of the GDPR provisions.It is to be expected that, as with other regulations, there will be active “forum shopping” (forum shopping refers to the possibility of choosing from among several available jurisdictions.).

*Bruno Wildhaber and Michael Erner are accredited data protection experts at the Independent Centre for Data Protection, Schleswig-Holstein (ULD) and internationally active data protection experts (Europe, South Africa).

What does this mean for us users and providers of IT solutions? We have summarized this in the enclosed white paper (download).

    More information on the GDPR:

    Comparison CH DSG new – DSGVO

    GDPR Short Assessment

    You can find comprehensive information about our data protection services here.

    Action plan DSGVO according to DSK (Data Protection Conference, D)

    EU General Data Protection Regulation
    EU General Data Protection Regulation



    Submit a Comment

    Your email address will not be published. Required fields are marked *

    Related articles

    Dealing with data risks: Data breach notification

    Dealing with data risks: Data breach notification

    A data breach notification or "data breach notification" refers to the process by which an organization or company is required to notify the relevant data protection authorities and, if applicable, data subjects of a data breach that is likely to result in a high risk...

    read more