GDPR

The EU General Data Protection Regulation (GDPR) is the most comprehensive data protection law globally, governing how organizations collect, store, and process personal data of EU residents.

• 1

  Applies to any organization processing EU residents' personal data

• 2

  Requires explicit consent for data processing or other lawful basis

• 3

  Mandates Data Protection Officers for certain organizations

• 4

  Grants data subjects rights including access, rectification, erasure

• 5

  Requires 72-hour breach notification to supervisory authorities

• 6

  Restricts international data transfers outside EU/EEA