What is the GDPR?
The General Data Protection Regulation (GDPR) is a data protection and privacy regulation in European Union law. It was adopted in 2016 and became enforceable in May 2018. The GDPR applies to any organization that processes the personal data of EU residents.
Key GDPR rights
- Right to access: Individuals can request a copy of their personal data
- Right to erasure: Also known as the "right to be forgotten"
- Right to data portability: Transfer data between service providers
- Right to object: Object to processing of personal data
GDPR enforcement
Non-compliance can result in fines up to 4% of annual global turnover or €20 million, whichever is greater.