GDPR For Dummies

Don’t be afraid of the GDPR wolf!

How can your business easily comply with the new data protection and privacy laws and avoid fines of up to $27M? GDPR For Dummies sets out in simple steps how small business owners can comply with the complex General Data Protection Regulations (GDPR). These regulations apply to all businesses established in the EU and to businesses established outside of the EU insofar as they process personal data about people within the EU.

Inside, you’ll discover how GDPR applies to your business in the context of marketing, employment, providing your services, and using service providers. Learn how to avoid fines, regulatory investigations, customer complaints, and brand damage, while gaining a competitive advantage and increasing customer loyalty by putting privacy at the heart of your business.

• Find out what constitutes personal data and special category data
• Gain consent for online and offline marketing
• Put your Privacy Policy in place
• Report a data breach before being fined

79% of U.S. businesses haven’t figured out how they’ll report breaches in a timely fashion, provide customers the right to be forgotten, conduct privacy impact assessments, and more. If you are one of those businesses that hasn't put a plan in place, then GDPR For Dummies is for you.

Part 1: Getting Started with GDPR 11

Chapter 1: Grasping the Fundamentals of GDPR and Data Protection 13

Chapter 2: Key Changes Introduced by GDPR 21

Part 2: The Key Principles of GDPR 37

Chapter 3: Digging In to Data: What’s Personal, What’s Sensitive, and How It’s Processed 39

Chapter 4: The Six Data Protection Principles 79

Chapter 5: Data Controllers and Data Processors 89

Chapter 6: Transfers of Data Outside of the EEA 101

Part 3: Key Documentation 117

Chapter 7: Building Your Data Inventory 119

Chapter 8: Penning a Privacy Notice 135

Chapter 9: Cookie Policy 145

Chapter 10: Drafting Data Processing and Data Sharing Agreements 159

Chapter 11: Writing Opt-In Wording 171

Chapter 12: Writing a Legitimate Interests Assessment Form 187

Chapter 13: Writing Other Documents 195

Part 4: Data Subject Rights, Protection, and Security 203

Chapter 14: Data Subject Rights 205

Chapter 15: Data Protection by Design and by Default 229

Chapter 16: Data Security 243

Chapter 17: Data Breaches and Reporting Obligations 267

Part 5: The Workplace, Marketing, and Beyond 285

Chapter 18: GDPR and the Workplace 287

Chapter 19: Keeping Your Marketing GDPR-Compliant 311

Chapter 20: Children, Charities, and Associations 225

Chapter 21: Supervisory Authorities, Remedies, Liabilities, and Penalties 351

Part 6: The Part of Tens 369

Chapter 22: Ten GDPR Resources 371

Chapter 23: Ten Must-Have Skills for the DPO 379

Chapter 24: Ten Ways to Train Employees to Be Good Stewards of Data 385

Part 7: Appendixes 393

Appendix A: Upcoming Changes to Data Protection Laws 395

Appendix B: List of Supervisory Authorities 403

Appendix C: GDPR Checklist 409

Appendix D: Glossary 419

Index 425

Suzanne Dibble is a business lawyer who has advised huge multi-national corporations, private equity-backed enterprises, and household names. Since 2010 she has focused on small businesses, combining her knowledge of large organizations with a deep appreciation for entrepreneurship, especially online businesses, to provide practical, relevant advice. See more at suzannedibble.com

• Implement the key requirements of the GDPR
• Understand how the GDPR affects your business
• Plan how you'll deal with a data breach

Your essential guide to complying with GDPR

The GDPR—the General Data Protection Regulation—is a complex set of rules you'll need to follow if your business has any dealings with EU countries or if you are established in the EU. This guide provides simple steps to help you comply with these new requirements. Learn how GDPR affects your employment practices, services, marketing and how you deal with other service providers. Brought to you by a leading GDPR expert, you'll discover how to prevent costly fines, investigations, and customer complaints while gaining a competitive advantage and increasing customer loyalty by putting privacy at the heart of your business.

Inside...

• The scope of GDPR
• How GDPR affects your business
• Consequences of non- compliance
• What personal data includes
• What special category data is
• Implementing a privacy policy
• Essential data security practices
• How to report a data breach