November 2019
Beginner to intermediate
496 pages
15h 32m
English
Content preview from Data Privacy and GDPR Handbook
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
8Remedies
Extreme remedies are very appropriate for extreme diseases.
— Hippocrates
In Chapter 7 we discussed the enforcement mechanisms open to data subjects under GDPR; now let us examine the remedies available in those actions. This chapter will discuss the “teeth” of the regulation, focusing on how noncompliance is punished. Throughout this book, we discussed how GDPR creates a market of stern compliance by incorporating Controller/Processor accountability at all stages of processing. Remedies are how the law penalizes those who break it.
GDPR has two species of remedies available to carry out enforcement, compensation, and administrative fines. Criminal penalties such as imprisonment or deprivation of profits1 are left to the Member States to legislate on further, subject to the rules of double jeopardy.2 Compensation is a civil remedy for damages by the user, while administrative fines are handed down by the SA in exercise of their corrective authority.
8.1 Allocating Liability
The Controller and Processor are the two players under GDPR who will be held responsible in the event of a contravention. Despite sharing this liability, the burden can be shifted between the two based on the following rules.3
8.1.1 Controller Alone Liable
The Controller bears liability for any damage caused in processing that infringes GDPR.4 The entity bears this burden as a default unless it can prove that it (the Controller) is in no way liable for the event that caused the damage.5 This ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.