ABSTRACT

With the introduction of the GDPR in 2018, the high-profile case of Facebook and Cambridge Analytica, and the multiple fines issued for breach of data security issues, Chapter 9 helps rights owners understand how to conform to relevant data legislation, interpreting it to ensure the right application to their own use cases. The focus is on ensuring that the most important rights – i.e. those rights of the individual data subject – are protected with clarity and simplicity. Details of how to go about compliance with legislation are set out, including recommendations on frameworks that allow rights owners to benefit from, and not fear, the implications.

The case study is provided by AS Roma, a football club that plays in the Italian top tier, Serie A, that has taken a creative approach to compliance with legislation.