Abstract—The aim of the General Data Protection Regulation (GDPR) is to ensure the consistency of the protection of personal data across the European Union (EU). The GDPR imposes new rules that directly affect every Member State. The purpose of this paper is to identify the practical implications of GDPR and to discuss the changes that have the most practical relevance. The situation regarding the collection, processing and use of personal data at the higher education institution (HEI) in Croatia is analyzed with aim of alignment with the provisions of the GDPR. Accordingly, the areas within the HEI that are subject to change are identified, and measures implemented in order to align to the GDPR are presented.

Index Terms—GDPR, HEI, personal data protection, steps of implementation.

The authors are with Faculty of Organization and Informatics Varaždin, University of Zagreb, Pavlinska 2, 42000 Varaždin, Croatia (email: renata.mekovec@foi.hr).

Cite: Renata Mekovec, Dijana Peras, "Implementation of the General Data Protection Regulation: Case of Higher Education Institution," International Journal of e-Education, e-Business, e-Management and e-Learning vol. 10, no. 1, pp. 104-113, 2020.