Wednesday 25 April 2018

GDPR - the new Data Protection Standard Headache

I'm currently reading-up on GDPR and whilst I wholeheartedly agree with it in principle the legalese used in the EU official documentation kind of goes against GDPR's overall principles of 'transparency' and 'clear, concise language' ... below is an excerpt I've singled out for ridicule:

"A group of undertakings should cover a controlling undertaking and its controlled undertakings, whereby the controlling undertaking should be the undertaking which can exert a dominant influence over the other undertakings by virtue, for example, of ownership, financial participation or the rules which govern it or the power to have personal data protection rules implemented. An undertaking which controls the processing of personal data in undertakings affiliated to it should be regarded, together with those undertakings, as a group of undertakings."

Whoever wrote that paragraph was either extremely anal, or they were a group of very pissed-up people (probably MEP-type civil servants) having a laugh.