GDPR

The GDPR (General Data Protection Regulation) is the European Union's data protection law. It governs how organizations collect, store, and share personal data about people in the EU, requires a lawful basis such as explicit consent for processing, and carries significant fines for violations.

The GDPR applies to any organization that processes personal data of people in the EU, regardless of where the organization itself is based. It gives individuals specific rights over their own data - including access, correction, deletion, and the ability to withdraw consent - and requires that data only be kept for as long as it is actually needed.

Learn more

• Regulation (EU) 2016/679 (GDPR) - the official regulation text
• Personal data