GDPR: Outlining the Basic Requirements and Opportunities for Colocation Providers
The European General Data Protection Regulation ( GDPR ) law was enforced in May, but is still confusing to some colocation providers as to which requirements they must comply with and how. So, I talked to an expert on the subject and came away with a clear answer: “It depends.” GDPR is all about ensuring the privacy of consumers’ personal data and giving them more control over how data is used and for how long (as explained in this previous post arguing why it’s necessary ). It’s important because it applies to any organization of any size that stores or processes any kind of personal data on EU residents. For all intents and purposes, that means just about any EU company to the extent each holds data on its own employees. But it also applies to companies outside the EU that hold data on EU residents – again, that’s a lot of companies. GDPR Basics: Data Controllers vs. Data Processors Mark Bailey is a partner at the UK law firm Charles Russell Speechlys and an expert on var...