GDPR - General Data Protection Regulation

Definition

The General Data Protection Regulation (GDPR) has been directly applicable law in all EU member states since May 25, 2018. It harmonizes data protection standards within the EU, strengthens user rights regarding the handling of their personal data, and obliges companies to implement transparent and secure data management practices.

Examples

• Cookie banners to obtain consent before tracking
• Right to erasure (“right to be forgotten”)
• Obligation to report data breaches within 72 hours

Target Groups

• Companies and organizations operating in the EU or processing data of EU citizens
• Marketing and communications teams
• Data protection officers, legal and compliance departments

Benefits (through GDPR compliance)

• Strengthening of user trust
• Reduction of legal risks and avoidance of heavy fines (up to 4% of global annual turnover)
• Improved transparency and data security