#compting

European Parliament adopts

tough new data protection rules

tougher penalties for companies found to be breaching European Union data protection law, with fines of up to 4 per cent of global turnover;

a requirement for larger companies to appoint a data protection officer if they process sensitive data at scale;

a requirement for companies to disclose personal data breaches within 72 hours;

liability for data breaches extending to any data processors used by a data controller;

enshrining Europe’s so-called right to be forgotten ruling in law, and expanding its scope;

a right for data portability for individuals to enable them to more easily switch between services;

parental consent for children to use social media;