Czech data protection compared to the GDPR

General overview

The Czech Data Protection Act is not a complex data protection law but contains several exceptions and clarifications of GDPR rules in the national context. Exceptions include reduced information obligations and lower administrative fines for certain controllers, as well as exemptions for the exercise of certain data subject rights. Clarifications include age specifications for children's consent, the processing of personal data, i.e., when necessary to fulfill a legal obligation, and the performance of a task carried out in the public interest.

GDPR opening clauses

Czech Republic has specific regulations for the processing of data related to minors, the processing of data for journalistic purposes, and the processing of data for scientific research.

Key differences and national particularities

Specific data protection law and official guidelines

Czech Republic has specific data protection laws and official guidelines. These provide detailed information and guidance on compliance with data protection provisions in Czech Republic.

Legal basis and sensitive data

Czech Republic has specific regulations concerning the legal basis for data processing and the processing of sensitive data. Companies must ensure that they adequately inform data subjects about the processing of their data.

E-Marketing and online data protection

There are regulations regarding e-marketing and online data protection in the Czech Republic. However, it is important to note that a new regulation through the ePrivacy Regulation is still pending.

Data subject rights

The rights of data subjects in the Czech Republic are detailed. Companies should ensure that they respect these rights.

Data Protection Impact Assessments (DPIAs) and Data Protection Officer (DPO)

Companies in the Czech Republic should ensure they conduct DPIAs in accordance with Czech regulations. Additionally, there are regulations concerning the appointment of a Data Protection Officer.

Conclusion

Czech Republic has adopted many of the GDPR guidelines but has also introduced some national particularities. Companies operating in Czech Republic or conducting business with Czech citizens should ensure they fully understand and comply with both the GDPR and the Czech Data Protection Act.