Although the EU General Data Protection Regulation comes into force in May 2018, European regulators are still producing guidance and member states are still adopting legislation to accommodate national differences. Put simply, it is unclear how to prepare for the GDPR in relation to some issues. For other issues, however, companies can confidently act now and will benefit from doing so.
Privacy statements are a great example. You can update your company’s privacy statement now to meet the GDPR’s “say what you do” requirements and in the process identify operational updates necessary to meet the GDPR’s “do what you say” demand. This article aims to help in updating your privacy statement for GDPR compliance now.
Read the full analysis here.