Why assess privacy compliance
Any activity that processes personal data for the most diverse reasons is subject to specific sector legislation, mainly the European Regulation on the protection of natural persons with regard to the processing of personal data (EU Regulation no. 679 of 2016) and the national legislation.
The analysis of the processing methodologies and procedures followed makes it possible to highlight any critical issues and to evaluate the severity of any shortcomings that prevent full regulatory alignment.
In addition to the obvious principles of fairness towards the data subjects (the subjects who are the legitimate owners of the respective personal data), it is worth remembering that current legislation provides for very heavy administrative fines in the event of a violation, not to mention criminal implications for the cases provided for.
In particular, Article 83 of the GDPR states that administrative fines must be effective, proportionate and dissuasive. The meaning of the latter term is undoubtedly clearer when, in the same article of the Regulation, it specifies that the foreseen amount is up to ten million euros and, for undertakings, up to 2% of the total worldwide annual turnover.
In light of this information, it is therefore evident why it is necessary to check the actual fulfilment of legal requirements every time there is even a minimal change in the data processing necessary for the normal course of your business.
