GDPR PIERDUT ÎNTRE DOSARE. ESENŢA PROTECŢIEI DATELOR CU CARACTER PERSONAL NU SE AFLĂ ÎN FIŞETUL JURIŞTILOR, NICI ÎN ARHIVE, CI ÎN CULTURA ORGANIZAŢIONALĂ
GDPR LOST BETWEEN CASE FILES. THE ESSENCE OF PERSONAL DATA PROTECTION IS NOT FOUND IN THE LAWYERS’ FILING CABINETS, NOR IN THE ARCHIVES, BUT IN THE ORGANISATIONAL CULTURE

Summary/Abstract: In many organizations, the application of the General Data Protection Regulation (GDPR) has stopped at the level of documentation – drafted policies, completed registers, archived consents. This formal approach, although necessary, misses the essence: data protection is not an isolated administrative act, but a process that involves the entire organisational culture. The article proposes a change of perspective, emphasizing that genuine compliance with GDPR requirements begins beyond declarative conformity – in day-to-day behaviours, in work decisions and in the values shared by the staff. By reviewing recurring practices and institutional barriers, it is argued that lasting success in the field of data protection requires internal ownership, consistency between discourse and practice, as well as the integration of confidentiality principles into current processes. It is not enough to comply with the letter of the law; the deeper meaning of the regulation must be understood, internalised and reflected in each organization’s culture.

• Details
• Contents