{"id":36818,"date":"2022-02-15T14:49:00","date_gmt":"2022-02-15T13:49:00","guid":{"rendered":"https:\/\/fhi.nl\/nieuws\/qa-hoe-giet-u-de-avg-in-een-eigen-mal-in-gesprek-met-autoriteit-persoonsgegevens\/"},"modified":"2024-07-10T13:33:44","modified_gmt":"2024-07-10T11:33:44","slug":"qa-hoe-giet-u-de-avg-in-een-eigen-mal-in-gesprek-met-autoriteit-persoonsgegevens","status":"publish","type":"news","link":"https:\/\/fhi.nl\/en\/news\/qa-hoe-giet-u-de-avg-in-een-eigen-mal-in-gesprek-met-autoriteit-persoonsgegevens\/","title":{"rendered":"Q&A: how do you cast the GDPR into your own mould? In conversation with the Dutch Data Protection Authority"},"content":{"rendered":"
\n\n\t\n\t\t\t
<\/div>\n\t\n\t
\n\t\t
\n\t\t\t
\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t

\n\t\t\t\t\tQ&A: how do you cast the GDPR into your own mould? In conversation with the Dutch Data Protection Authority\t\t\t\t<\/h1>\n\n\t\t\t\t
\n\t\t\t\t\t<\/svg>\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/header>\n\n\t
\n\t
\n\t\t
\n\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
Branch<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tLaboratory Technology\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n<\/div>\n\n
\n\t
\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t

What happens to personal data when it comes into the hands of organizations? It is up to labs to provide a well-thought-out answer to this. At least that's what the General Data Protection Regulation tells us. That is precisely where the crux lies. Because are the choices you have made the right ones? The Dutch Data Protection Authority is happy to provide clarity. A Q&A with Sofie van der Meulen, Senior Supervision Officer.<\/p>\r\n

To start at the beginning: what makes it so difficult for organizations to implement the GDPR?<\/h4>\r\n

\u201cThe GDPR has many open standards. The framework has been drawn out, but it offers quite a bit of room to further color this within your own specific situation, working method and according to your own preferences. For example, the legislation states that there must be a processing register, but what exactly that looks like is up to your own interpretation. While one person provides insight into collected and processed personal data with data management software, the other uses an Excel sheet.\u201d<\/p>\r\n

Is one better than the other?<\/h4>\r\n

\u201cOne organization is not the same as the other. Processes, systems and methods of data collection differ. There are companies with 3,000 employees and small organizations with three employees. For those reasons, everyone casts the GDPR in their own mold. What works well for one person does not necessarily have to be the solution for another.\u201d<\/p>\r\n

Are there any more reasons why the GDPR remains difficult for organizations?<\/h4>\r\n

\u201cWhen the GDPR came into effect, a lot of attention was paid to fines. As a result, the idea prevails that you will be immediately punished if you do not comply with the legislation. I would like to dispel the misconception. If you are reprimanded, this is normally not immediately a fine. This is preceded by discussions and opportunities for improvement. If we impose a fine, then something is really going on. For example, if the mistakes made are disproportionate.\u201d Want to know more about the basics of the GDPR?<\/p>\r\n