UPSC Prelims 2019 Question:

Which of the following adopted a law on data protection and privacy for its citizens known as ‘General Data Protection Regulation’ in April 2016 and started implementation of it from 25th May, 2018?

Explanation:

• General Data Protection Regulation (GDPR) is a law enacted by the European Parliament in May 2016 to lay down stringent ground rules for all entities that collect, store or use personal data belonging to residents in 28 European Union (EU) countries. The primary objective of the GDPR is to establish the right to privacy as one of the fundamental rights for EU residents.
  
  
• The law also requires firms to seek user consent through an explicit opt-in, or a signature on a consent form. Once the data is shared, consumers also have the right to object to specific uses of their personal data and can demand a playback or deletion of their past records at any time.
  
  
• Three aspects of the new GDPR:
  
  

• It applies not just to companies based in the EU, but to all firms that sell goods or services.
  
  
• The GDPR affects not just the entities collecting the data but also all those who process the data on their behalf. 
                                 
• Law imposes a fine of €20 million or 4 percent of a company’s global sales, whichever is higher, for serious violations.
  
  

Therefore, option (3) is the correct answer.

Subject: Polity | International Relations