Authorities should give out warnings rather than impose fines in the first year of implementation of the General Data Protection Regulation, the Chamber of Small and Medium Enterprises (GRTU) said.

The European Union’s General Data Protection Regulation (GDPR) came into effect on Friday. It increases privacy for individuals and aims to ensure that personal data gathered is done lawfully and with the individuals’ full consent.

The new regulation also gives authorities more power to act on those who do not comply.

In this regard, local authorities are now able to impose harsher fines with up to four per cent of annual turnover or €20 million, the GRTU said.

The chamber insisted that businesses needed to be given more time to fully implement the regulation, adding that the legislation was “cumbersome”.

READ: High-profile US news sites blocked for EU users as GDPR comes into force

It fails to make a distinction between small and medium enterprises

“It fails to make a distinction between small and medium enterprises (SMEs) and larger organisations,” the GRTU said.

The regulation was also very subjective and, in many ways, open to interpretation.

“Although the GRTU believes that its members are doing their best to comply with this regulation, one cannot expect business to become fully compliant right from the start,” it said.

The GRTU said that it has organised a series of information sessions, seminars and conferences for its members in order to prepare for the regulation.

“Through these seminars, members were given the necessary information and tools to bring their business in line with this regulation,” it said.

However, the new regulation was still “not the easiest to comply with”, the organisation lamented on Friday.

Sign up to our free newsletters

Get the best updates straight to your inbox:
Please select at least one mailing list.

You can unsubscribe at any time by clicking the link in the footer of our emails. We use Mailchimp as our marketing platform. By subscribing, you acknowledge that your information will be transferred to Mailchimp for processing.