{"id":65110,"date":"2018-05-30T17:38:51","date_gmt":"2018-05-30T09:38:51","guid":{"rendered":"https:\/\/wp-productionenv-bjg9h2g2bgg5b8aa.southeastasia-01.azurewebsites.net\/news\/gdpr-is-here-but-what-does-it-really-mean-for-satellite\/"},"modified":"2018-05-30T17:38:51","modified_gmt":"2018-05-30T09:38:51","slug":"gdpr-is-here-but-what-does-it-really-mean-for-satellite","status":"publish","type":"post","link":"https:\/\/starpath.global\/news\/gdpr-is-here-but-what-does-it-really-mean-for-satellite\/","title":{"rendered":"GDPR is Here But, What Does it Really Mean for Satellite?"},"content":{"rendered":"<\/p>\n
\"GDPR
Photo by DaveLevy <\/small><\/figcaption><\/figure>\n<\/p>\n

The satellite industry is so laden with abbreviations and acronyms that, from space-geek talk and technical terms that are better left unexpanded, to terms that are commonly used in everyday business, it all seems like Greek to an industry outsider. Now, there is one more acronym to add to the alphabet soup thanks to the European Union (EU).<\/p>\n

The GDPR, or General Data Protection Regulation 2016\/679, is a directive in EU law on data protection and privacy for all individuals within the EU and the European Economic Area (EEA). It also extends to the export of personal data outside the EU and EEA. More than understanding the words behind this new acronym, industry players need to understand how GDPR applies within the context of satellite. What does it mean, what actions and changes does it bring, and what are the risks?<\/p>\n

The GDPR, which became enforceable last week, is designed to give individuals more control over their personal data, and the way organizations process and store data on their behalf. Under the GDPR, all companies collecting or processing EU citizens\u2019 and residents\u2019 personal data must have an inventory in place, demonstrating compliance with data protection principles. These companies are responsible for:<\/p>\n

    \n
  • obtaining consent from individuals about whom they hold or collect information, demonstrating a positive opt-in;<\/li>\n
  • allowing those individuals to transfer their personal data between service providers more easily;<\/li>\n
  • providing any information held about an individual to the individual, within one month of their request;<\/li>\n
  • anonymizing and protecting personal data;<\/li>\n
  • notifying the supervising authority of any breach within 72 hours, as well as all data subjects whose rights or freedoms were put at risk by the breach; and,<\/li>\n
  • under certain circumstances, erasing personal data upon the individual\u2019s request.<\/li>\n<\/ul>\n

    There are additional requirements for companies with more than 250 employees as well as any company collecting or processing sensitive personal data, such as revealing a subject\u2019s genetic data, health, racial or ethnic origin, or religious beliefs. Infringement of certain articles of the GDPR can carry potential maximum fines of up to 20 million euros ($23.4 million), or 4 percent of total global revenue of the preceding year \u2014 whichever is greater \u2014 and can cause lasting reputational damage, according to Joanne Wheeler, director at Alden<\/strong>, advisers for the satellite, space, telecommunications and applications industries.<\/p>\n

    \u201cAs of May 25, the obligations introduced by the GDPR will apply to a company in the satellite industry in the same way as the regulations will apply to companies in other sectors, as long as the company is EU-based, or is non-EU based but processes an EU resident\u2019s personal data in connection with goods or services being offered to that resident,\u201d says Wheeler, noting that the GDPR does not apply to institutions such as the European Commission or European Global Navigation Satellite Systems Agency<\/strong>. \u201cIn these cases,\u201d she explains, \u201cthe processing of personal information is governed by a different regulation: Regulation (EC) 45\/2001. International intergovernmental organizations such as the European Space Agency<\/strong> (ESA) are not subject to EU law, including the GDPR. However, ESA has its own internal personal data policy relating to the processing and control of personal data which shares similarities to the wording of the GDPR.\u201d<\/p>\n

    Who in Satellite is Impacted?<\/strong><\/h3>\n

    Within the satellite industry, the GDPR will have an impact on Direct-to-Home (DTH) broadcasting, satellite telecommunications services and geolocation services, says Wheeler. In DTH, the impact is in the use of personal data, as defined in Article 4 GDPR, by TV operators in relation to viewers, and the obligation of operators to inform viewers or subscribers of how their data is collected, stored and processed. Regarding satellite telecommunications services, it is in relation to the flow of data, while the GDPR affects geolocation services and associated data such as personal addresses.<\/p>\n

    \u201cSatellite services which involve the processing of personal data for national security services may fall outside the scope of the GDPR,\u201d notes Wheeler.<\/p>\n

    The main challenge facing the satellite industry, similarly with other industries, is compliance, explains Wheeler. \u201cThis includes ensuring that the processing of data throughout the EU, irrespective of whether the satellite operator or company is EU-based or not, is in line with the new regulatory requirements,\u201d she adds.<\/p>\n

    One of the purposes of the GDPR was to give data subjects more control over how their data is used and to make companies processing this data more accountable. \u201cThis means that companies must be very clear about identifying data subjects, communicating to them the purpose of the data processing and seeking their consent to have their personal data processed,\u201d concludes Wheeler.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Photo by DaveLevy The satellite industry is so laden with abbreviations and acronyms that, from space-geek talk and technical terms that are better left unexpanded, to terms that are commonly used in everyday business, it all seems like Greek to an industry outsider. Now, there is one more acronym to add to the alphabet soup […]<\/p>\n","protected":false},"author":1,"featured_media":65111,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[2],"tags":[],"class_list":["post-65110","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/65110"}],"collection":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/comments?post=65110"}],"version-history":[{"count":0,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/65110\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media\/65111"}],"wp:attachment":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media?parent=65110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/categories?post=65110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/tags?post=65110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}