General Data Protection Regulations (GDPR) - Revision history

Editor at 16:47, 1 October 2021

2021-10-01T16:47:14Z

← Older revision		Revision as of 16:47, 1 October 2021
Line 85:		Line 85:
	* Cyber threats to building automation and control systems.		* Cyber threats to building automation and control systems.
	* Data manager.		* Data manager.
		+	* Data portability.
	* Data Protection Act.		* Data Protection Act.
	* Information manager.		* Information manager.

Editor at 15:18, 17 September 2020

2020-09-17T15:18:48Z

← Older revision		Revision as of 15:18, 17 September 2020
Line 91:		Line 91:
	* Privacy.		* Privacy.

−	[[Category:DCN_Definition]] [[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]	+	[[Category:DCN_Definition]] [[Category:DCN_Regulation]] [[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]

Editor at 15:18, 17 September 2020

2020-09-17T15:18:23Z

← Older revision		Revision as of 15:18, 17 September 2020
Line 81:		Line 81:
	= Related articles on Designing Buildings Wiki =		= Related articles on Designing Buildings Wiki =

		+	* Adapting your technology to the new working normal.
	* Cyber security and engineering.		* Cyber security and engineering.
	* Cyber threats to building automation and control systems.		* Cyber threats to building automation and control systems.
Line 90:		Line 91:
	* Privacy.		* Privacy.

−	[[Category:~~International~~]] [[Category:~~Research_/_Innovation~~]] [[Category:~~DCN_Research,_Development_and_Innovation~~]] [[Category:Property_law]]	+	[[Category:DCN_Definition]] [[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]

Editor at 19:48, 14 August 2020

2020-08-14T19:48:34Z

← Older revision		Revision as of 19:48, 14 August 2020
Line 86:		Line 86:
	* Data Protection Act.		* Data Protection Act.
	* Information manager.		* Information manager.
		+	* Office design and data privacy.
	* Open data.		* Open data.
	* Privacy.		* Privacy.

−	[[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]	+	[[Category:International]] [[Category:Research_/_Innovation]] [[Category:DCN_Research,_Development_and_Innovation]] [[Category:Property_law]]

Designing Buildings at 10:13, 25 May 2020

2020-05-25T10:13:59Z

← Older revision		Revision as of 10:13, 25 May 2020
Line 87:		Line 87:
	* Information manager.		* Information manager.
	* Open data.		* Open data.
		+	* Privacy.

	[[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]		[[Category:International]] [[Category:Research_/_Innovation]] [[Category:Property_law]]

Editor at 14:31, 28 October 2019

2019-10-28T14:31:34Z

← Older revision		Revision as of 14:31, 28 October 2019
Line 72:		Line 72:
	= About this article =		= About this article =

−	This article was written by Adam Kirkup. It was previously published on the website of ICE in January 2018 and can be accessed ~~HERE~~.	+	This article was written by Adam Kirkup. It was previously published on the website of ICE in January 2018 and can be accessed [https://www.ice.org.uk/knowledge-and-resources/information-sheet/what-will-the-gdpr-mean-for-you HERE].
−		+
−	~~More articles by ICE on Designing Buildings Wiki can be accessed HERE~~.~~<br~~ />	+

		+	More articles by ICE on Designing Buildings Wiki can be accessed [[ICE_articles_on_Designing_Buildings_Wiki\|HERE.]]

		+	<br />
	--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]		--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]

Editor at 14:27, 28 October 2019

2019-10-28T14:27:58Z

← Older revision		Revision as of 14:27, 28 October 2019
Line 21:		Line 21:
	= What are the key changes? =		= What are the key changes? =

−	The key changes are provided under the GDPR website, and it is advised to visit [https://www.eugdpr.org/key-changes.html this portal] for the most up-to-date information to ensure you and/or your organisation is compliant. However, the key changes are described as:	+	The key changes are provided under the GDPR website, and it is advised to visit [https://www.eugdpr.org/key-changes.html this portal] for the most up-to-date information to ensure you and/or your organisation are compliant. However, the key changes are described as:

	=== Increased Territorial Scope (extra-territorial applicability) ===		=== Increased Territorial Scope (extra-territorial applicability) ===

−	GDPR applies to all companies processing the personal data of data subjects residing in the Union, regardless of the company's location.	+	GDPR applies to all companies processing the personal data of data subjects residing in the European Union, regardless of the company's location.

	=== Penalties ===		=== Penalties ===
Line 48:		Line 48:
	= Data subject rights =		= Data subject rights =

−	Under GDPR organisations must consider how they store personal data and organise themselves appropriately. For data subject rights, this includes:	+	Under GDPR, organisations must consider how they store personal data and organise themselves appropriately. For data subject rights, this includes:

	* Breach Notification to become mandatory in all EU member states where a data breach is likely to "result in a risk for the rights and freedoms of individuals". This must be done within 72 hours of first having become aware of the breach. Data processors will also be required to notify their customers, the controllers, "without undue delay" after first becoming aware of a data breach.		* Breach Notification to become mandatory in all EU member states where a data breach is likely to "result in a risk for the rights and freedoms of individuals". This must be done within 72 hours of first having become aware of the breach. Data processors will also be required to notify their customers, the controllers, "without undue delay" after first becoming aware of a data breach.

−	* Right to ~~Access~~ is the right for data subjects to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed, where and for what purpose. Further, the controller shall provide a copy of the personal data, free of charge, in an electronic format.	+	* Right to access is the right for data subjects to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed, where and for what purpose. Further, the controller shall provide a copy of the personal data, free of charge, in an electronic format.

	* Right to be forgotten/Data erasure entitles the data subject to have the data controller erase his/her personal data, cease further dissemination of the data, and potentially have third parties halt processing of the data.		* Right to be forgotten/Data erasure entitles the data subject to have the data controller erase his/her personal data, cease further dissemination of the data, and potentially have third parties halt processing of the data.

−	* Data portability is the right for a data subject to receive the personal data concerning them, which they have previously provided in a 'commonly ~~use~~ and machine readable format' and have the right to transmit that data to another controller.	+	* Data portability is the right for a data subject to receive the personal data concerning them, which they have previously provided in a 'commonly used and machine readable format' and have the right to transmit that data to another controller.

	* Privacy by design calls for the inclusion of data protection from the onset of the designing of systems, rather than an addition. More specifically - 'The controller shall..implement appropriate technical and organisational measures..in an effective way.. in order to meet the requirements of this Regulation and protect the rights of data subjects'.		* Privacy by design calls for the inclusion of data protection from the onset of the designing of systems, rather than an addition. More specifically - 'The controller shall..implement appropriate technical and organisational measures..in an effective way.. in order to meet the requirements of this Regulation and protect the rights of data subjects'.

−	* Under GDPR, Data Protection Officers (DPO) will not be required to submit notifications / registrations to each local DPA of data processing activities. Instead, there will be internal record keeping requirements. DPO appointment will be mandatory only for those controllers and processors whose core activities consist of processing operations which require regular and systematic monitoring of data subjects on a large scale or of special categories of data or data relating to criminal convictions and offences.	+	* Under GDPR, Data Protection Officers (DPO) will not be required to submit notifications / registrations to each local DPA of data processing activities. Instead, there will be internal record-keeping requirements. DPO appointment will be mandatory only for those controllers and processors whose core activities consist of processing operations which require regular and systematic monitoring of data subjects on a large scale or of special categories of data or data relating to criminal convictions and offences.

	= Will GDPR matter for organisations in the UK after Brexit? =		= Will GDPR matter for organisations in the UK after Brexit? =

−	~~For~~ companies in the UK ~~If you~~ process data about individuals in the context of selling goods or services to citizens in other EU countries then ~~you~~ will need to comply with the GDPR, irrespective as to whether or not the UK retains the GDPR post-Brexit.	+	If companies in the UK process data about individuals in the context of selling goods or services to citizens in other EU countries then they will need to comply with the GDPR, irrespective as to whether or not the UK retains the GDPR post-Brexit.

	= What should you do next? =		= What should you do next? =

−	GDPR ~~will come~~ into effect from 25 May 2018. ~~All organisations~~ must ~~begin~~ to plan ~~for the change in legislation~~ and consider how their existing practice ~~could~~ result in a data breach, or result in them being judged 'non-compliant'.	+	GDPR came into effect from 25 May 2018. Organisations must continue to plan and consider how their existing practice might result in a data breach, or result in them being judged 'non-compliant'.
		+
		+	= About this article =
		+
		+	This article was written by Adam Kirkup. It was previously published on the website of ICE in January 2018 and can be accessed HERE.
		+
		+	More articles by ICE on Designing Buildings Wiki can be accessed HERE.<br />

−	~~-----~~
−	~~This article was originally published [https://www.ice.org.uk/knowledge-and-resources/information-sheet/what-will-the-gdpr-mean-for-you here] by ICE on 11 Jan 2018. It was written by Adam Kirkup.~~

	--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]		--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]
Line 77:		Line 81:
	= Related articles on Designing Buildings Wiki =		= Related articles on Designing Buildings Wiki =

−	* Articles by ICE on Designing Buildings Wiki.
	* Cyber security and engineering.		* Cyber security and engineering.
	* Cyber threats to building automation and control systems.		* Cyber threats to building automation and control systems.

Editor at 14:13, 28 October 2019

2019-10-28T14:13:08Z

← Older revision		Revision as of 14:13, 28 October 2019
Line 5:		Line 5:
	On 25 May 2018, the EU General Data Protection Regulation (GDPR) replaced the Data Protection Directive 95/46/EC.		On 25 May 2018, the EU General Data Protection Regulation (GDPR) replaced the Data Protection Directive 95/46/EC.

−	GDPR was designed to harmonise data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organisations across the region approach data privacy.	+	GDPR was designed to harmonise data privacy laws across Europe, to protect and empower all EU citizens' data privacy and to reshape the way organisations across the region approach data privacy.

	= What is GDPR? =		= What is GDPR? =

−	GDPR ~~is a legislative document by the~~ EU ~~to bring~~ data protection legislation into line with the numerous ways that data is now used. ~~Currently~~ the UK ~~abides~~ by the Data Protection Act 1998. This ~~will be~~ superseded by the ~~new~~ GDPR legislation and ~~will result~~ in higher penalties for breaches and non-compliance.	+	GDPR resulted from EU legislation which updated data protection legislation into line with the numerous ways that data is now used. Hitherto, the UK abided by the Data Protection Act 1998. This was superseded by the GDPR legislation and ushered in higher penalties for breaches and non-compliance.

−	= What are the ~~aim~~ and benefits of GDPR? =	+	= What are the aims and benefits of GDPR? =

	Put simply, GDPR was designed to give the public more say over which organisations have access to their data and what they do with it. GDPR will apply to personal data.		Put simply, GDPR was designed to give the public more say over which organisations have access to their data and what they do with it. GDPR will apply to personal data.

Designing Buildings at 14:06, 22 November 2018

2018-11-22T14:06:22Z

← Older revision		Revision as of 14:06, 22 November 2018
Line 75:		Line 75:
	--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]		--[[User:Institution_of_Civil_Engineers\|Institution of Civil Engineers]]

−	= ~~Find out more~~ =	+	= Related articles on Designing Buildings Wiki =

−	~~=== Related articles on Designing Buildings Wiki ===~~	+	* Articles by ICE on Designing Buildings Wiki.
−		+
−	* ~~[[User:Institution_of_Civil_Engineers\|~~Articles by ICE on Designing Buildings Wiki.]]	+
	* Cyber security and engineering.		* Cyber security and engineering.
	* Cyber threats to building automation and control systems.		* Cyber threats to building automation and control systems.

Editor at 12:07, 20 September 2018

2018-09-20T12:07:11Z

← Older revision		Revision as of 12:07, 20 September 2018
Line 3:		Line 3:
	= Introduction =		= Introduction =

−	~~From~~ 25 May 2018, the EU General Data Protection Regulation (GDPR) ~~will replace~~ the Data Protection Directive 95/46/EC. ~~After this date, organisations in non-compliance could be heavily fined, so what actions should you take to avoid this?~~	+	On 25 May 2018, the EU General Data Protection Regulation (GDPR) replaced the Data Protection Directive 95/46/EC.

	GDPR was designed to harmonise data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organisations across the region approach data privacy.		GDPR was designed to harmonise data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organisations across the region approach data privacy.
Line 9:		Line 9:
	= What is GDPR? =		= What is GDPR? =

−	GDPR is a legislative document by the EU to bring data protection legislation into line with the numerous ways that data is now used. Currently, the UK abides by the Data Protection Act 1998. This will be superseded by the new GDPR legislation and will result in higher penalties for breaches and non-compliance.	+	GDPR is a legislative document by the EU to bring data protection legislation into line with the numerous ways that data is now used. Currently the UK abides by the Data Protection Act 1998. This will be superseded by the new GDPR legislation and will result in higher penalties for breaches and non-compliance.

	= What are the aim and benefits of GDPR? =		= What are the aim and benefits of GDPR? =