EU Compliance Requirements

European Commission publishes new data protection

Order Compliance management KitDownload Selected Pages

The European Commission has released details of its proposed changes to European Union data protection laws. These will update the existing data protection rules, which have been in place since 1995.

Compliance Management Kit Key changes proposed by the European Commission include:

  • A single set of rules on data protection, valid across the EU.
  • ‘Unnecessary administrative requirements' will be removed.
  • Increased responsibility and accountability for those processing personal data. For example, companies and organizations must notify the national supervisory authority of serious data breaches as soon as possible (if feasible within 24 hours).
  • Organizations will only have to deal with a single national data protection authority in the EU country where they have their main establishment.
  • Wherever consent is required for data to be processed, permission must be given explicitly, rather than assumed.
  • People will have easier access to their own data and be able to transfer personal data from one service provider to another more easily (right to data portability).
  • A ‘right to be forgotten' will help people better manage data protection risks online: people will be able to delete their data if there are no legitimate grounds for retaining it.
  • EU rules must apply if personal data is handled abroad by companies that are active in the EU market and offer their services to EU citizens.
  • Independent national data protection authorities will be strengthened so they can better enforce the EU rules at home. They will be empowered to fine companies that violate EU data protection rules. This can lead to penalties of up to €1 million or up to 2 percent of the global annual turnover of a company.
  • A new Directive will apply general data protection principles and rules for police and judicial cooperation in criminal matters. The rules will apply to both domestic and cross-border transfers of data.

The Commission's proposals will now be passed on to the European Parliament and EU Member States (meeting in the Council of Ministers) for discussion. They will take effect two years after they have been adopted.

Compliance Management Toolkit Versions

Janco offers a full range of tools to help enterprises of all sizes to address these issues. The Compliance Management kit provides the infrastructure tools

In addition to the Compliance Management White Paper we provided the The Compliance Management tool kit in three (3) versions: Silver, Gold, and Platinum.

OrderCompliance Management White Paper

Compliance Management White Paper
  • Compliance Management White Paper - Summarizes mandated compliance requirements and provides a summary level work plan for how to implement Compliance Management policies and procedures.

    White Paper contains a table of manadated record retention periods and a list of all of the states and US possessions with their mandated notification requirements. Updated to include GDPR and CaCPA requirement discussion

OrderCompliance Management - Silver Edition

Compliance Management White Paper  Secuirty Audit Program  PCI Audit Program  Compliance Job Descriptions
  • Compliance Management White Paper
  • Security Audit Program - fully editable -- Comes in MS EXCEL and PDF formats -- Meets ISO 27001, 27002, Sarbanes-Oxley, PCI-DSS and HIPAA requirements -- Over 400 unique tasks divided into 11 areas of audit focus which are the divided into 39 separate task groupings including BYOD.
  • PCI Audit Program - Word and PDF
  • Job Descriptions (31 key positions) - Word Format - fully editable and PDF
    • Chief Compliance Officer (CCO), Director Electronic Commerce, Manager BYOD Support, Manager Internet - Intranet Activities, Manager Internet Systems, Manager Point of Sale, Manager Record Administration, Manager Transaction Processing, Manager Video and Website Content, Manager Web Content, Manager Wireless Systems, BYOD Support Specialist, e-Commerce Coordinator, e-Commerce Coordinator Senior, e-Commerce Specialist, Internet-Intranet Administrator, On-Line Transaction Processing Analyst, PCI-DSS Administrator, PCI-DSS Coordinator, POS Coordinator, POS Hardware Coordinator, POS Senior Coordinator, Record Management Coordinator, System Administrator - Linux, System Administrator - UNIX, System Administrator - Windows, Web Analyst, Web Site Designer, Webmaster, Wireless Coordinator, and Wi-Fi Administrator

OrderCompliance Management - Gold Edition

Compliance Management White Paper Secuirty Audit Program PCI Audit Program Compliance Job Descriptions Record Management Policy Privacy Compliance Policy
  • Compliance Management White Paper
  • Security Audit Program
  • PCI Audit Program
  • Job Descriptions (31 key positions)
  • Record Classification and Management Policy - Word - Policy which complies with mandated US, EU, and ISO requirements
  • Privacy Compliance Policy that address the EU's GDPR and the latest California Consumer Privacy Act

OrderCompliance Management - Platinum Edition

Compliance Management White Paper  Security Audit Program PCI Audit Program  Compliance Job Descriptions  Record Management Policy Privacy Compliance Policy  Security Manual
  • Compliance Management White Paper
  • Security Audit Program
  • PCI Audit Program
  • Job Descriptions (31 key positions)
  • Record Classification and Management
  • Privacy Compliance Policy that address the EU's GDPR and the latest California Consumer Privacy Act
  • Security Manual Template - Word - 240 plus packed pages which are usable as is. Over 3,000 companies worldwide have chosen this as the basis for their best practices to meet mandated US, EU and ISO requirements

Order compliance management KitDownload Compliance White Paper Table of Contents