The General Data Protection Regulation (GDPR) will be legally binding from May 2018 - what is to be done?
To assist its customers with the implementation of the new European General Data Protection Regulation (GDPR), the distributor Rutronik Elektronische Bauelemente GmbH has founded a GDPR excellence team. It is composed of experts from multiple departments and offers advice and tips on the secure transfer, storage, and processing of data in addition to developing complete GDPR-compliant system concepts.
The excellence team’s consultancy services encompass the definitions in the GDPR which require further explanation such as “state of the art” and “personal data” as well as case examples dealing with these and other specialist terms. In addition, the team also offers market investigations and basic training sessions at the customer’s premises on the topics of cryptography, redundancy, and wireless protocols. To this end, the Rutronik experts discuss the issues directly with the customers so as to determine precisely what problems might arise and how they can be avoided.
Nobody knows an individual electronic component better than the component’s product manager. The excellence team’s thorough preparations allow customers to inform themselves about the weakness of individual components and alternatives to these components which are securer with regard to the new statutory requirements. Taking a closer look at additional aspects together with the experienced engineers and investigating all the applications across all the ISO/OSI layers is also recommendable.
“Manufacturers of electrical devices are very aware of the importance of security, but in such a short time have presumably not had the opportunity to investigate all the aspects and ramifications of the new legislation for their products,” says Bernd Hantsche, Managing Director Embedded & Wireless and initiator of the GDPR campaign at Rutronik.
This could allow competitors to lodge complaints about lacking GDPR conformity with courts and attempt to halt sales. This is where Rutronik comes into play as an external service provider with a wealth of expertise: “As such, a discussion with us is a sensible precautionary measure allowing you to identify competitors’ possible arguments before May 2018 and prepare for them.” From a legal perspective, however, the customer bears all responsibility.
A regulation with far-reaching consequences
The regulation, which will come into force and be legally binding throughout the European Union on May 25, 2018, stipulates stricter requirements in Article 25 “Data protection by design and by default” and Article 32 “Security of processing” for the production of electrical equipment than its predecessor, the German Federal Data Protection Act (BDSG). Should a company fail to comply with the requirements of these two articles, it could face penalties of up to €10 million or two percent of its turnover.
About Rutronik Elektronische Bauelemente GmbH
Rutronik Elektronische Bauelemente GmbH is the third largest distributor in Europe (European Distribution Report 2016) and the number ten worldwide (SourceToday, May 2017). The broadline distributor supplies semiconductors, passive and electromechanical components as well as boards, storage, displays & wireless products. The company's primary target markets are the automotive, medical, industrial, home appliance, energy and lighting industries. The ranges RUTRONIK EMBEDDED, RUTRONIK SMART, RUTRONIK POWER and RUTRONIK AUTOMOTIVE provide customers with specific products and services in groups tailored to the respective applications. Expert technical support for product development and design-in, individual logistics and supply chain management solutions as well as comprehensive services complete its scope of performance.
The company, founded by Helmut Rudel in 1973 in Ispringen, Germany, now has over 70 subsidiaries in Europe, Asia and the Americas. Rutronik employs more than 1,500 staff worldwide and achieved Group sales of 872 million euros in the fiscal year 2016.