OUR BLOG

In celebration of the International Data Protection Day, we are writing to you about GDPR and why it plays a significant role in business.

 

GDPR (General Data Protection Regulation) is undoubtedly the most significant privacy data regulation in the last 20 years. It came into force in the European Union in May 2018, followed by the Personal Data Protection Law (ZZPL) in 2019. Since then, citizens' awareness of their privacy rights has increased significantly. The importance of the right to personal data protection is also guaranteed by the Constitution of the Republic of Serbia under the section on human and minority rights and freedoms. The law stipulates an extremely high level of responsibility for all entities that collect and process personal data.

 

What are the monetary fines?

 

GDPR applies to every company processing personal data of European citizens. Non-compliance can lead to serious financial penalties – up to 4% of the total annual revenue or 20 million euros. The highest fine for GDPR violation to date was imposed on Google, amounting to 50 million euros. In contrast to fines in European regulations, penalties for non-compliance with the Personal Data Protection Law in Serbia are considerably lower. The maximum fine in our country is 2,000,000 dinars, while the minimum is 50,000 dinars. If GDPR also applies to the data controller, the maximum fine is 20,000,000 euros or 4% of the annual turnover. For multiple violations, the fine can be up to 4,000,000 dinars.

 

What is the impact on reputation?

 

Apart from financial penalties, there are much more significant penalties related to damaging the company's reputation. Once you allow the compromise of your clients' data, there is no turning back. Once data is disclosed, it can never be fully retracted.

 

Is there criminal liability?

 

Certainly. For the violation of this law, the criminal code provides for imprisonment, and criminal liability applies only to individuals. Individuals who unlawfully obtain, disclose to another person, or use for a purpose for which they were not intended can be fined or sentenced to imprisonment for up to one year. If an official commits such acts in the performance of official duties, they may face imprisonment for up to 3 years.

 

What is the situation with your company? Are you fully compliant with GDPR and the Personal Data Protection Law?

 

For more information on how Sky Express, a regional leader in cybersecurity, can help you comply with GDPR, contact us at prodaja@sky-express.rs.

 

 

 

 

 

Recent Posts