This workshop will examine the legal and practical impact of GDPR on Middle East/GCC based organisations. All the key issues for Data Controllers as well as Data Processors will be discussed as well as how GDPR is a business opportunity rather than a threat.

GDPR introduces, amongst other things:

Stronger Enforcement: Failure to comply could lead to fines of up to 4% of global annual turnover or 20 million Euros (whichever is higher).

New Consent Rules: The end of pre-ticked boxes, opt-out boxes and assumed consent.

Data Breach Notification: The Supervisory Authority (and sometimes Data Subjects) must be notified of personal data breaches within 72 hours.

A "Right To Be Forgotten": Data Subjects who no longer want their personal data to be processed, can demand that it be deleted, provided that there are no legitimate grounds for retaining it.

New Information Rights: Data Subjects will have more rights to know how their personal data is processed and where it is transferred to.

Privacy By Design And By Default: Data protection safeguards will have to be built into products and services from the earliest stage of development.