General data protection regulation — Protection of personal data in an organisation

Personal data represent all data (identifiers) relating to an identified individual. Identifiers can include first name and last name, network IP address, MAC address, GPS location, telephone number, personal ID, biometric data and other relevant data in connection with personal identity. The European Union (EU) has adopted a new framework for the protection of personal data entitled General Data Protection Regulation (GDPR) which will apply to Croatia from May 25th 2018. This paper analyses the differences between the new GDPR and the existing Data Protection Directive from 1995, which is currently still in force.