Gdpr

Updated 1,518 Days AgoPublic

Actions

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy.

from wikipedia.org/wiki/General_Data_Protection_Regulation

It also addresses the transfer of personal data outside the EU

Controllers and processors of personal data must put in place appropriate technical and organizational measures to implement the data protection principles. Business processes that handle personal data must be designed and built with consideration of the principles and provide safeguards to protect data (for example, using pseudonymization or full anonymization where appropriate).

Data controllers must clearly disclose any data collection, declare the lawful basis and purpose for data processing, and state how long data is being retained and if it is being shared with any third parties or outside of the EEA. Data subjects have the right to request a portable copy of the data collected by a controller in a common format, and the right to have their data erased under certain circumstances.