GDPR
General Data Protection Regulation ((EU) 2016/679) is the primary legal framework in the european-union for data protection and privacy, governing the collection, processing, and storage of personal data. It replaced the 1995 Data Protection Directive to harmonize data privacy laws across Europe and strengthen individual control over their data.
Key Principles
- Lawfulness, Fairness, and Transparency: Data must be processed lawfully and transparently.
- Purpose Limitation: Data collected for specified, explicit, and legitimate purposes.
- Data Minimization: Data must be adequate, relevant, and limited to what is necessary.
- Accuracy: Personal data must be accurate and kept up to date.
- Storage Limitation: Data kept only as long as necessary for the purposes for which it is processed.
- Integrity and Confidentiality: Data processed securely against unauthorized access or loss.
- Accountability: The data controller is responsible for demonstrating compliance.
Enforcement and Rights
- Right to Erasure (Right to be Forgotten): Individuals can request deletion of their personal data under specific conditions.
- Penalties: Non-compliance can result in fines up to €20 million or 4% of global annual turnover.
- Cross-Border Data Transfer: Strict rules apply to transferring personal data outside the european-union.
Practical Implementation: Automating Deletion
While GDPR grants the right to erasure, manually exercising this right across numerous data brokers is labor-intensive. Tools like Unbroker automate this process locally.
- Unbroker is a skill for the open-source Hermes Agent designed to automate personal data deletion from 500+ data brokers.
- It addresses the gap between legal rights and practical enforcement by handling the “deliberately complex” opt-out processes.
- See Unbroker: Automating Personal Data Deletion from Data Brokers Locally for technical details.