{"id":19104,"date":"2022-02-14T15:12:58","date_gmt":"2022-02-14T14:12:58","guid":{"rendered":"https:\/\/www.galitt.com\/2022\/02\/14\/gdpr-origin-and-impacts-on-payment\/"},"modified":"2022-02-15T11:46:30","modified_gmt":"2022-02-15T10:46:30","slug":"gdpr-origin-and-impacts-on-payment","status":"publish","type":"post","link":"https:\/\/www.galitt.com\/en\/gdpr-origin-and-impacts-on-payment\/","title":{"rendered":"GDPR: Origin and impacts on payment"},"content":{"rendered":"\n[et_pb_section fb_built=”1″ _builder_version=”4.6.6″ _module_preset=”default” custom_padding=”||0px|||”][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.6.6″ _module_preset=”default” custom_padding=”0px|||||”][et_pb_row _builder_version=”4.6.6″ _module_preset=”default” custom_padding=”0px|||||”][et_pb_column type=”4_4″ _builder_version=”4.6.6″ _module_preset=”default”][et_pb_post_title meta=”off” _builder_version=”4.6.6″ _module_preset=”default”][\/et_pb_post_title][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” min_height=”75px” custom_margin=”50px||0px||false|false” custom_padding=”||24px|||”]

The General Data Protection Regulation<\/strong> was applied on May 25, 2018 and is one of the fundamental principles of data security, especially in the digital sector. This document has several objectives: to strengthen regulation by rallying the data protection authorities, to revalorize the rights of individuals in terms of protecting their data and finally, to make all actors who may process this data in the course of their activity accountable.<\/span><\/p>\n

<\/p>[\/et_pb_text][et_pb_image src=”https:\/\/www.galitt.com\/wp-content\/uploads\/2022\/02\/source-donnees-et-rgpd.jpg” alt=”donn\u00e9es-RGPD paiement” title_text=”source-donn\u00e9es et rgpd” align=”center” _builder_version=”4.6.6″ _module_preset=”default” width=”70%”][\/et_pb_image][et_pb_text _builder_version=”4.6.6″ _module_preset=”default”]

Source\u00a0: Donn\u00e9es-RGPD<\/em><\/p>[\/et_pb_text][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” custom_margin=”50px||0px||false|false”]

Where does the need for an GDPR come from?<\/strong><\/span><\/h2>[\/et_pb_text][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” min_height=”413px” custom_padding=”0px||0px|||”]

The GDPR is of course not the first document put in place to protect the private data of the population. It is inspired and even largely derived from a French law applied on January 6, 1978 aiming first of all at countering the filing of data based on the social security number.<\/strong><\/span><\/p>\n

It is only a few years later that the Minitel and the first computers began to appear, bringing with them their share of concerns and uncertainty concerning the protection of <\/strong>their users’ data. <\/strong>The fact that the circulation of data became international at that time, pushed the countries concerned to establish common rules to control this circulation.<\/span><\/p>\n

All these reflections have allowed the European Union to publish and apply the GDPR that we know today: inevitable and to be respected by all companies. A long-distance arm-wrestling match is therefore unconsciously taking place between Europe and the United States, with large American companies such as Google having to comply with this regulation on European territory.<\/span><\/p>\n

Its implementation was quick: almost every website you visit will indicate your data protection options at the bottom of the page<\/strong>. The Internet user can check off what he wants to share or not, and can count on the CNIL’s surveillance to ensure that the visited site respects its commitments in terms of private data protection.<\/span><\/p>\n

Another element that reinforces the relevance of this GDPR is the rapid evolution of payment methods and the appearance of new ones<\/strong>. The latter require particular attention regarding the security of the data involved in the financial processes.<\/span><\/p>\n

<\/p>[\/et_pb_text][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” custom_margin=”50px||0px||false|false” hover_enabled=”0″ sticky_enabled=”0″]

GDPR and payment security<\/strong><\/span><\/h2>[\/et_pb_text][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” custom_margin=”18px||0px||false|false” custom_padding=”||0px|||”]

The GDPR has indeed a very important role to play in the payment industry due to the sensitivity of the information involved in this sector.<\/span><\/p>\n

Let’s take the example of e-payment by bank card<\/strong>. This means of payment, which is increasingly used by consumers, logically required a framework adapted to its development. During an online purchase, the e-merchant will temporarily have access to the cardholder’s card data: the card number, its cryptogram and its expiration date. One of the roles of the GDPR, and even more so of the CNIL, is to ensure that this data is not kept <\/strong>by the e-merchant once the purchase is validated.<\/span><\/p>\n

The only case where this data can be kept is if the cardholder has given his consent to the merchant<\/strong>, for example in the context of subsequent or recurring purchases from the same e-merchant. The CNIL encourages merchants to include a clear option for cardholders to withdraw their consent at no additional cost.<\/span><\/p>[\/et_pb_text][et_pb_image src=”https:\/\/www.galitt.com\/wp-content\/uploads\/2022\/02\/source-CNIL.png” alt=”RGPD-s\u00e9curit\u00e9 des paiements” title_text=”source-CNIL” align=”center” _builder_version=”4.6.6″ _module_preset=”default” width=”70%” custom_margin=”21px||||false|false”][\/et_pb_image][et_pb_text _builder_version=”4.6.6″ _module_preset=”default”]

Source\u00a0: CNIL<\/p>[\/et_pb_text][et_pb_text _builder_version=”4.6.6″ _module_preset=”default” custom_margin=”18px||0px||false|false” custom_padding=”||0px|||”]

The example of subscriptions comes to the forefront in this case, since it shows a willingness on the part of the customer to make a medium or long-term commitment to the merchant<\/strong>. The e-merchants have the possibility in this case to keep the user’s data under certain conditions:<\/span><\/p>\n