Principles and obligations and, therefore, showing compliance to the authorities. Of the corresponding regulations. Data protection by design ( data protection by design ) and by default ( by default ). The person responsible for the treatment must carry out the organizational, political and technical measures to " comply with the principles of data protection by design and by default ", reducing the treatment and contributing to the transparency, anticipation and improvement of security measures. .
Rights and sanctions right to be forgotten: it is included in article 17 of the rgpd. It consists of the inherent right of the interested party to obtain, without any delay, from the data controller, the deletion of personal data. Reinforcement of consent: there is no tacit consent whatsapp number list but it must be given expressly " by means of a declaration or a clear affirmative action ". In the case of subjects under 16 years of age, it will require the consent of their parents or legal guardians.
Right to data portability : collected in article 20 of the rgpd, according to which “ the interested party will have the right to receive the personal data that concerns him, that he has provided to a data controller, in a structured format, of common use and mechanical reading, and to transmit them to another data controller without being prevented by the data controller to whom they were provided ”. Sanctions : the ceilings required of companies for non-compliance with the regulations will be increased. It goes from a maximum limit set in the lopd of €600,000 to a maximum limit of €20,000,000 or 4% of the total volume of