GDPR

The GDPR (General Data Protection Regulation) is the European Union's data protection law. It governs how organisations collect, store and share personal data about people in the EU, requires a lawful basis such as explicit consent for processing, and carries significant fines for violations.

The GDPR applies to any organisation that processes personal data of people in the EU, regardless of where the organisation itself is based. It gives individuals specific rights over their own data - including access, correction, deletion and the ability to withdraw consent - and requires that data only be kept for as long as it is actually needed.

Learn more

• Regulation (EU) 2016/679 (GDPR) - the official text of the regulation
• Personal data