Quote:
Originally Posted by 1andrew1
The good thing about GDPR is the company from 25/5 can only legally use your data for the purpose you allow it to be used for. It can't add a general use for direct marketing into its terms and conditions; this has to be explicitly requested and the individual needs to tick an explicit box to agree to it. A ticked box is not a default option.
|
True, but the problem with the GDPR is the bureaucracy of it all. Instead of laying down how organisations have to process their data, they make every organisation, even small voluntary ones, set it out themselves. They have multiplied the amount of work required in setting this legislation by millions of times.
Why could they not have set out the requirements on the treatment of data in legislation, instead of requiring everyone to have a policy, and instead of having a privacy notice for every organisation, why don't they set out the principles in an annex?
It's a very large sledgehammer to crack a very small nut, actually, and it's yet another example of how much worse the red tape is within the EU.
...And don't get me started on the Acquired Rights Directive!