GDPR - after the hype
Valavuo, Riitta (2020)
2020
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2020120726457
https://urn.fi/URN:NBN:fi:amk-2020120726457
Tiivistelmä
This thesis was done to answer the following questions: What is the difference between the national act and the EU’s regulation? How do the companies see the challenges? Has anything improved? Have people used their right to see what data has been collected from them? What kind of security breaches are there and how are they handled? What would the companies do differently now?
The main intent was to study the new Data Protection Act and compare it to the General Data Protection Regulation in order to see how it was complemented. This study also focused on the implementation and monitoring of the two. Also data protection and data security were briefly explained. The legislation is still fairly new and there is no case law. The first fines in Finland have been issued during summer 2020.
This study was a case study using mixed data collection methods. A case study is often used when researching a particular phenomenon, in this case the legislation and its adaptation. The main focus of this thesis was on the interviews and the data collected by them. By this way the research questions could be answered.
The GDPR and later the Data Protection Act applies to everyone and none of the companies regardless of their size are excluded. This means that these matters should affect us all. It remains to be seen how the data protection will be seen in future and how it will develop, what will be the means and also the consequences if not followed. This thesis studies it as is currently giving companies a brief introduction to the matter. This thesis can be used as a guide or as a source of reference material making it easier to understand what it is about.
The main intent was to study the new Data Protection Act and compare it to the General Data Protection Regulation in order to see how it was complemented. This study also focused on the implementation and monitoring of the two. Also data protection and data security were briefly explained. The legislation is still fairly new and there is no case law. The first fines in Finland have been issued during summer 2020.
This study was a case study using mixed data collection methods. A case study is often used when researching a particular phenomenon, in this case the legislation and its adaptation. The main focus of this thesis was on the interviews and the data collected by them. By this way the research questions could be answered.
The GDPR and later the Data Protection Act applies to everyone and none of the companies regardless of their size are excluded. This means that these matters should affect us all. It remains to be seen how the data protection will be seen in future and how it will develop, what will be the means and also the consequences if not followed. This thesis studies it as is currently giving companies a brief introduction to the matter. This thesis can be used as a guide or as a source of reference material making it easier to understand what it is about.