Etude des risques associés au traitement de données, des réponses apportées par le GDPR et de son implémentation dans le système bancaire belge

Abstract

In a world where «Big Data» is constantly growing, organizations hold more and more information about individuals. These data can sometimes be critical and damaging if they were to be made public. Data protection has therefore become a major issue for legislators. A data protection directive already existed, namely the Directive 95/46/EC, which was introduced in 1995. However, the latter has become obsolete. This is the reason why the GDPR was born. This master thesis, entitled: « Study of the risks associated with data processing, the answers provided by the GDPR and its implementation in the Belgian banking system » aims to determine to what extent the new regulations make it possible to reduce the risks inherent in such processing. In this context, two GDPR Leads were interviewed. They provided interesting insights which helped us figure out if the risks are being mitigated. The first part of this thesis is devoted to introduce the GDPR and what its scope is. We then explained the main principles of this new regulation. Afterwards, we described the 13 steps proposed by the Privacy Commission to comply with this new legislation. We concluded this chapter by exploring the risks inherent in data processing and the factors influencing those risks. The second part consists of figuring out how the new data protection regulations make it possible to reduce the risks inherent in data processing. As we have seen in this thesis, the main risks are: data theft, use of inaccurate data, lock of proportionality, and lack of consent. The analysis of those interviews as well as the principle of the GDPR helped us answer our research thesis. We concluded that the new regulations reduce the risks associated with data processing. Indeed, for all identified risks, the GDPR has established rules to mitigate them. With regard to our two interviewed banks, we establish that, overall, the processes put in place make it possible to reduce the risks.