The document discusses the General Data Protection Regulation (GDPR), highlighting its complexity and implications for data subjects and providers. It outlines the roles of users, data controllers, and processors along with their responsibilities under GDPR. Additionally, it emphasizes user rights such as information access, rectification, and data portability.

1. CIO DAY
SOLVING THE GDPR
TUESDAY 21 NOVEMBER 2017
L E O P O L D M E I J N E N O O S T E R B A A N
A D V O C A T E N

2. THE GDPR IS: ABOUT HIGH FINES
2
GENERAL GDPR SUMMARY

3. THE GDPR IS: COMPLEX RULES
3
COMMMON GDPR TAKE-AWAY

4. THE GDPR IS: NOT COMPLEX ENOUGH
4

5. 5
USER SITE PROVIDER: HOSTING

6. 6
USER SITE HOSTING
ANALYTICS
PAYMENTS
ADS?

7. 7
USER
“DATA-SUBJECT”
SITE
“CONTROLLER”
PROVIDER: HOSTING
“PROCESSOR”

8. 8
USER
“DATA-SUBJECT”
SITE
“CONTROLLER”
PROVIDER: HOSTING
“PROCESSOR”
“CONSENT” OR
“LEGITIMATE INTEREST”
“PROCESSOR AGREEMENT”DETERMINES:
“PURPOSES AND
MEANS”
PROVIDES:
“INFORMATION” TO
DATA-SUBJECT
KEEPS: “RECORD OF
PROCESSING
ACTIVITIES”
PROCESSES :
“ON BEHALF OF”
ACTS: “ON
DOCUMENTED
INSTRUCTIONS”
KEEPS: “RECORD
OF PROCESSING
ACTIVITIES”
IS: “IDENTIFIED,
DIRECTLY OR
INDIRECTLY”
HAS RIGHTS:
”INFORMATION”
“ACCESS”
“RECTIFICATION”
“ERASURE”
“DATA-PORTABILITY”

9. 9

10. 10
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER

11. 11
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER

12. 12
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

13. 13
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

18. 18
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

19. 19
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

20. 20
USER SITE PROVIDER: HOSTING

21. 21
USER SITE PROVIDER 1
(SSP)
PROVIDER 2
(DSP)
ADVERTIZER
PROVIDER 3
ANALYTICS
PROVIDER 4
AB/MV TESTING
PROVIDER 5
EXCHANGE
PROVIDER 6
TAG MGMT
PROVIDER 7
CRM
PROVIDER 8
ANALYTICS

22. 22
ABOUT Olivier Oosterbaan
advocaat / attorney-at-law; admitted to New York bar
Leopold Meijnen Oosterbaan
Amsterdam
oosterbaan@lmoadvocaten.nl
@ooosterbaan
IT / Data Protection / IP