Adequate provision of information to users.
This includes the obligation to inform individuals about the purpose of the data collection and the existence of any transfer of data to third parties. Depending on the intended use of personal data, permission will also have to be requested when appropriate.
Adequate security measures and restrictions on profiling
Not only does the GDPR oblige to take adequate security measures. The GDPR also contains special provisions that explicitly restrict the profiling of individuals. Profiling is lucrative. This method combines information to create an individual user profile. This profile can be used for advertising purposes, or to block certain users, but also, for example, to give users specific offers for the highest possible price.
Compensation for damage caused by breaches
Article 82 GDPR prescribes that anyone who has suffered damage as a result of a breach of this regulation has the right to receive damages from controllers or processors for the damage suffered. The claim for compensation can concern both material damage and non-material damage.