EU data laws threaten huge fines

http://www.bbc.co.uk/news/technology-35110909

Version 0 of 1.

Technology companies could face fines of up to 4% of their global annual turnover under new European rules on data protection.

The European Union has approved significant changes to data laws, aimed at putting individuals back in charge of their information.

It is the biggest shake-up to privacy regulation for 20 years, according to experts.

The changes would make privacy "a board-level issue", one lawyer said.

Peter Church, a technology lawyer at Linklaters, said it would make businesses "start taking these issues a lot more seriously".

US technology companies already have an uneasy relationship with European regulators, with both Google and Facebook facing big fines - Facebook over its use of cookies and Google over its privacy policy.

Although this new law will not come into force until 2018, the changes meant the tech giants would have to "pay more attention to what regulators are saying", said Mr Church.

The new draft policy, in discussion since 2012, will need to be ratified by the European Parliament next year.

Other changes include:

Jan Philipp Albrech, chief negotiator, said of deal: "This would be a major step forward for consumer protection and competition and ensure Europe has data protection rules that are fit for purpose in the digital age."

Stewart Room, head of data privacy at PwC, said: "The scale and breadth of the EU's changes to privacy rules will deliver unprecedented challenges for business and every entity that holds of uses European personal data both inside and outside the EU.

"Most companies will be shocked at the scale of the new rules and the work that needs to be done before the laws take effect in two years - it is not much time for the magnitude of the internal changes that will be required."