The influence of General data protection regulation on organizations and consumers in Slovenia

Z napredkom informacijsko–komunikacijskih tehnologij organizacije lažje in hitreje dostopajo do posameznikovih osebnih podatkov. Le-ti so postali surov material in gorivo, na podlagi katerega podjetja pripravijo bolj prilagojeno ponudbo potrošnikom in žanjejo uspehe. Posledica sta povečano zbiranje in prost pretok podatkov, ki ogrožata temeljne pravice in svoboščine posameznikov, kamor spadata pravica do zasebnosti in varstvo osebnih podatkov. V Evropski uniji je 25. maja 2018 v veljavo stopila Splošna uredba o varstvu podatkov, ki je prej razdrobljeno zakonodajo o varstvu osebnih podatkov v državah članicah poenotila. Za razliko od Direktive 95/46/ES o varstvu posameznikov pri obdelavi osebnih podatkov in o prostem pretoku teh podatkov, ki je vsaki državi dopuščala svobodo pri implementaciji, je Splošna uredba o varstvu podatkov na dan vstopa v veljavo takoj postala del pravnega reda države. Na eni strani so morale organizacije prilagoditi način, na katerega zbirajo, obdelujejo in shranjujejo podatke, potrošniki pa so zdaj bolj opolnomočeni in imajo nad svojimi osebnimi podatki večji nadzor. Pregled strokovne literature omogoča vpogled v varstvo podatkov predvsem na območju Evropske unije v preteklosti in danes, kvalitativno raziskovanje (poglobljeni intervjuji z zaposlenimi, ki so skrbeli za implementacijo uredbe v organizacijah) nam pomaga odgovoriti na vprašanje, kako Splošna uredba o varstvu podatkov vpliva na podjetja v Sloveniji, preko kvantitativnega raziskovanja (vprašalnika) pa ugotavljamo, kako uredba vpliva na potrošnike v Sloveniji.Rapid development in information and communication technology helped organizations to gain an easier access to personal data. Gathered personal information became raw material and fuel for organizations. They ensure more adapted offer for their costumers and a greater chance for success. On the other hand, increased data collection and free flow of personal information represents a bigger threat for consumers and for their fundamental rights and freedoms, including the right to privacy and protection of personal data. On May 25th 2018 General data protection regulation entered into force and ensured harmonized legislation in European Union. Unlike the Directive No. 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data that allowed more freedom at implementation into national legislation, GDPR immediately became a part of legal system of each Member State. Overview of scientific literature enables insight into development of protection of personal data especially in European Union. Qualitative research (in-depth interviews with employees that implemented GDPR in their organizations) helps us answer how General data protection regulation affects enterprises in Slovenia. With quantitative research (questionnaire) we want to establish how regulation affects consumers in Slovenia