GDPR

StatuteInternational

The European Union data protection regulation in force since 2018

Overview

The General Data Protection Regulation, adopted in 2016 and enforceable from May 2018, governs all processing of personal data in the EU, requiring lawful bases, purpose limitation, minimization, and security, and granting rights of access, correction, erasure, and portability. Fines reach the higher of twenty million euros or four percent of global turnover, and its extraterritorial reach pulls foreign firms into compliance. It became the template for privacy law from Brazil to California to India. Consent banners everywhere are its public face.

Related Topics