GDPR

“GDPR” refers to the EU General Data Protection Regulation that took effect in May 2018.  The regulation outlines the guidelines for how personal data may be collected and processed for residents of the EU.  GDPR is applicable to all companies, websites, and entities that touch the personal data of EU residents, regardless of where that entity is based. 

The key principles of GDPR require: 

• Transparency in how personal data is collected and used

• Efforts to minimize the amount of personal data collected or processed to only that which is necessary

• Strong data privacy to ensure the security of personal data

• Autonomy for individuals to control how their data is used and revoke their consent to access or process their data (right to be forgotten)

Many organizations opt to adopt GDPR rules globally to go beyond legal requirements in data privacy.