Training, dissemination and disclosure of specific knowledge regarding security and privacy is a growing concern for European Union (EU) citizens and organizations. With the new General Data Protection Regulation (GDPR), individuals, companies and organizations take back control over their own online identities and over how such data is collected and used by others. It seems likely that Health and financial Institutions are the main actors affected by the change, but GDPR goes far beyond, affecting almost any company who storages -and processes with any objective- personal data.
GDPR is a step forward to preserve our rights, achieving greater transparency and trust around data collection and its sharing. Even people planning to work outside EU will benefit from this regulation, since as of May 2018, any interaction with EU customer data is protected by the same standards. However, given our almost-universal dependence from foreign technological solutions (operating systems, cloud-based solutions, office suites, social media platforms, etc.) it is essential to know what we are facing in the scope of this new law, and how it interacts outside the EU.
The Research Institute of Applied Sciences in Cybersecurity (RIASC) from Universidad de León and the Centro Universitario de la Defensa from Universidad de Zaragoza are two organizations dedicated to contribute to the development of science and culture in the field of cybersecurity. Their academic curricula are focused on data treatment, protection against cybersecurity threats and legal aspects of international cyber law.
On such scenario, this project intends to raise awareness of GDPR among young people through information and dissemination activities concerning this regulation. Given our experience, we aim to make this collective think about its consequences on their future jobs or initiatives and its legal implications on using foreign technologies that collect and manage their personal information.