Understanding General Data Protection Regulation and Data Privacy

1
Civil Law

2
Table of Contents
Section 1.....................................................................................................................................3
Section 2.....................................................................................................................................4
Section 3.....................................................................................................................................6
Section 4.....................................................................................................................................6
Reference List............................................................................................................................8

3
Section 1
The issues in the Concerns Section primarily involve the aspects related to the gaps identified
by the client which are to be addressed at the earliest in order to make sure that the outcomes
of the project are met in an effective and efficient manner as far as the comprehensive
solutions are concerned. The management of databases is also to be taken into consideration
since the client would be having the responsibility pertaining to the strategic aspect of data
clearing in terms of Human Resource, sales, procurement and finance (Martin, Borah and
Palmatier, 2017). It is imperative that the issues between the client and Clearing Skies UK
need to be resolved at the earliest in order to avoid and prevent the occurring of further
problems in the long runas far as the contract is concerned. There are also some emails
received by the team members of Clearing Skies UK which seem to be of such nature that
investigation in a detailed manner is needed for them. The General Data Protection
Regulation of the European Union is also to be understood in a proper and appropriate
manner as far as the concept of data privacy is concerned in order to undertake the necessary
steps for the ensuring of the confidentiality of data.
The risk register implies the aspect of the risks that would possibly occur in terms of the facts
of the case along with the steps and measures which would be undertaken in order to resolve
the risks and issues in an effective and efficient manner so that the project is completed in a
timely manner thereby implying the desired outcomes. The Red, Amber and Green (RAG)
status has been provided in the risk register taking account of the gravity of the risks and their
probability of taking place along with the extent of the effect the risks can have accordingly.
Additionally, mitigation plans have also been discussed and demonstrated in order to reduce
and prevent the risks to a significant extent as far as the appropriate steps and measures to be
undertaken are concerned (O'Har, Senesi and Molenaar, 2017). The action needs to be taken
for the prevention of risks in a proper manner by following the required steps thereby
resulting in an amicable solution in a timely manner as far as the facilitation of the ease of the
completion of the project is concerned. It is also imperative form of a risk register that the
almost all kinds of risks would cause various kinds of hindrances and impediments towards
the undertaking and finishing of the project in the manner as decided by the client of Clearing
Skies UK. The percentage relating to priority in terms of the addressing of the different kinds
of issues and risks have also been taken into consideration as implied by the risks and issues
register as observed and inferred from the facts of the case. Such kind of risks and issues

4
register plays an important role in the assessment and evaluation of risks in an incredible
manner thereby enabling the deduction of the solutions in the desired manner.
As implied by the entries of the risks in the register, it is observed that the resolution of the
issues should be done as early as possible so that there are no major hurdles and obstacles in
the course of the completion of the project at the client site. It is further implied form the
facts of the case that the relationships amongst the members of the team have been negative
in nature thereby leading to potential conflicts. As a result, measures are to be applied and
implemented in order to ensure that there is cohesion amongst the team members as far as the
amicable relationships are concerned which would help in the smooth completion of the
project thereby leading to the favourable outcomes (Hiscock and Jones, 2017). The policy
relating to the confidentiality data as per the register is to be analysed and implemented in a
proper and appropriate manner. It would help in the protection of data of the customers in an
effective manner thereby leading to the prevention of the breach of data. In this regard, the
laws and regulations related to data privacy would play an essential role as far as the
protection of data is concerned. Additionally, the mitigation of the risks would help in the
overcoming of the challenges to a considerable extent thereby leading to the closure of the
risks and issues register at the earliest as far as the undertaking of the necessary actions are
concerned.
Section 2
The regulation which has been implemented with regard to the ensuring of the privacy of data
is the General Data Protection Regulation. It was implemented on 25th May 2018. It is
applicable to the region of European Union and the European Economic Area. It plays in
important role in the protection of personal data.
Data privacy
The regulation is purported to protect the data of the citizens under the jurisdiction of the
European Union and the European Economic Area. In this regard, the management of data
would be facilitated by the application of this legislation in the desired manner as far as the
personal data of the customer concerned. The regulation is also aimed at the ensuring of the
right to privacy for all citizens belonging to the region of European Union and the European
Economic Area. Such right to privacy is implied by Article 8 of the European Convention on
Human Rights. As a result, the monitoring of the flow of personal data beyond the region of