Inevitabile che chi lavora con l'Europa - e non sono pochi - debba adeguarsi: http://privacyitaliana.com/2018/03/29/lindia-si-adegua-al-gdpr/ L'India si adegua al GDPR - Privacy Italiana<http://privacyitaliana.com/2018/03/29/lindia-si-adegua-al-gdpr/> privacyitaliana.com Non si intende in senso legislativo, ovviamente, ma moltissime ditte indiane hanno offerto il loro servizi di backoffice a ditte Saluti e buona Pasqua a tutti D. ________________________________ From: nexa <nexa-bounces@server-nexa.polito.it> on behalf of Alberto Cammozzo <ac+nexa@zeromx.net> Sent: Thursday, March 29, 2018 8:28 AM To: nexa@server-nexa.polito.it Subject: [nexa] WIRED: The Next Cold War Is Here, and It's All About Data GDPR diventerà uno standard globale? <https://www.wired.com/story/opinion-new-data-cold-war> [https://media.wired.com/photos/5ababc65624d1d6458b78879/191:100/pass/DataColdWar.jpg]<https://www.wired.com/story/opinion-new-data-cold-war> The Next Cold War Is Here, and It's All About Data<https://www.wired.com/story/opinion-new-data-cold-war> www.wired.com The General Data Protection Regulation coming to Europe this spring emphasizes how different societies value personal data and privacy. [] Combatants in the new Cold War are fighting over the currency of the modern age: personal information. The battles are over who controls data. Vying against each other are those societies that believe that individuals have an absolute right to control their personal data―to exercise the same kind of dominion over data that they do over their bodies or their personal property―and those that believe that personal data is a good to be traded on the open market and thus subject to the same market forces at play elsewhere. May the most innovative, efficient company win. The EU stands firmly for the interests of the individual. The regulatory language of the GDPR cogently expresses its view, harmonizing data protection rules throughout the EU and requiring that any company, anywhere, must respect the data rights of EU citizens, or face stiff penalties. Europeans must provide positive consent for the ways their data is used, and they have the right to access and erase that data, as well as the “right to be forgotten.” In the opposite corner sits the United States and the giant US corporations that trade in personal data for profit, and whose practices have expanded largely unchecked. One ideology puts the control of personal data in the hands of the individual, the other cedes that control to the corporation. (A third approach is state control of data, which is emerging as China’s social credit system, though that remains as yet an internal policy.) But these differing views about data protection cannot jostle for dominance for much longer. As trade grows increasingly global, it’s becoming clear that personal data crosses borders far too easily for contrasting models to co-exist. Now, weeks before the GDPR goes into effect, the evidence is mounting that the EU’s approach will dominate. One good measure of this dominance is the speed with which countries around the world are recognizing the supremacy of the EU data protection standard by adopting models that align closely with the GDPR. The number of countries that have attained official EU recognition of the “adequacy” of their standards grow steadily; South Korea and Japan will join the list soon. For their part, EU leaders are clear in their intent. “We want to set the global standard,” Věra Jourová, the European commissioner for justice, told POLITICO last year. “Privacy is a high priority for us.” And so it must also be for those who wish to trade with this powerful economic bloc. Even in the United States, there are signs of movement toward embracing higher standards for data protection. The United States offers a program, called Privacy Shield, that enables American companies to certify that their data protection practices meet EU standards (though this program is questioned by privacy purists in the EU). And some of the most trusted US corporations go to great lengths to respect the data rights of people in other countries (see the recent Microsoft case before the Supreme Court). Likewise, individual states establish GDPR-like laws for their citizens (see New York’s recent cybersecurity regulation). The sheer volume of companies that are willingly modifying their data protection practices, at great cost, to become “GDPR compliant” should be evidence enough that there is appetite in the US business community for the certainty of a unified data protection regime. [] _______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa