Implementation of the General Data Protection Regulation: Case of Higher Education Institution

Abstract

The aim of the General Data Protection Regulation (GDPR) is to ensure the consistency of the protection of personal data across the European Union (EU). The GDPR imposes new rules that directly affect every Member State. The purpose of this paper is to identify the practical implications of GDPR and to discuss the changes that have the most practical relevance. The situation regarding the collection, processing and use of personal data at the higher education institution (HEI) in Croatia is analyzed with aim of alignment with the provisions of the GDPR. Accordingly, the areas within the HEI that are subject to change are identified, and measures implemented in order to align to the GDPR are presented.