GDPR, from theory to practice. Development of a minimum basic data protection system for public and private sector entities

Abstract

Strong enterprise or organization privacy practices are critical in a rapidly evolving privacy regulatory landscape in Europe (ISACA, 2023). Privacy violations decrease customer trust and increasingly result in reputation damage and significant fines. Enterprise and organization privacy programs that aim to protect data subjects and gain their trust set those entities apart from competitors. Establishing compliance and maintaining it, is not an easy task for enterprises and organizations. Competent personnel both at technical and legal fields of privacy are needed. In that sense it is crucial that data holders understand data protection principles and the rights and freedoms of data subjects and implement appropriate measures and the necessary safeguards to reinforce these principles and to enable the exercise of these rights.