WHAT IS THE GDPR?
The General Data Protection Regulation (EU) 2016/679 ("GDPR") is a regulation in EU law on data protection and privacy for all individual citizens of the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA areas. The GDPR aims primarily to give control to individuals over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
MDLE COMPLIES WITH GDPR
6DCP’s MDLE unique identification technology places full control over the collection, retention, correction, and portability of personal data in the individual’s hands and greatly minimizes organizations exposure to GDPR sanctions.
EXAMPLE
A consumer purchases an item that requires product and/or warranty registration. The product itself is marked with a uniquely encrypted MDLE QR code. The uniquely encrypted MDLE QR code contains product information such as name, make, model #, serial #, and other relevant product information.
Inside the package is a product registration or warranty label/card marked with a second, uniquely encrypted MDLE QR code and company website address. The secondary QR code contains a PHR symmetrical key that will be used to encrypt the consumer’s personally identifiable information during the product registration or warranty process.
The consumer will enter the company’s web address listed on the product registration or warranty label/card, and will be asked to enter their name, address, cell phone number, and email address. Replacing the submit button is a ‘scan barcode’ button. Upon clicking the scan barcode button, an encryption module will be loaded into the consumer’s browser (on their desktop, laptop, tablet, or cellphone), and an HTML5 function will launch the camera on the device. The consumer will then be instructed to a) scan the uniquely encrypted MDLE QR code on the product, and b) scan the uniquely encrypted MDLE QR code on the product registration or warranty label/card. Once the two uniquely encrypted MDLE QR codes are scanned by the consumer, the browser will encrypt the product information (from the uniquely encrypted MDLE QR code on the product) and the consumer’s personally identifiable information. Upon completion, a new uniquely encrypted MDLE QR code containing the completed product registration or warranty information will be sent to the consumer’s cell phone number and email address.
When service or warranty is requested for an item, the consumer will enter the warranty page on the company’s website. The consumer will be presented with an option to scan or upload the completed uniquely encrypted MDLE QR code. Once authenticated by the company, a customer service agent can engage the consumer (via email and/or cell phone) to begin the warranty process.
If the consumer needs to update their cell phone number or email address, a similar process will be followed. Once the personally identifiable information is updated, a new uniquely encrypted MDLE QR code will be sent to the computer via SMS and email, replacing the previous one.
CONCLUSION
Organizations in the EU and around the world need to face a harsh reality, that despite how much resources are invested in securing and storing sensitive information, cyber attackers will always find a way to access it.
With 6DCP’s MDLE unique identification technology, organizations can protect themselves while simultaneously identifying and authenticating individual users.
Please contact us to learn how.