Schedule Your GDPR Compliance Audit Now

General Data Protection Regulation (GDPR) governs how EU organizations collect and use personal data.

[{"selector":"#anim-ebb4f7cc-7878-4828-8d18-e0671c066c28","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ec9dc793-6313-4dc8-b21a-88a265b32273","keyframes":{"transform":["translate3d(0px, -167.13239%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b5783824-ed17-40e0-a5aa-fea98c284652 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-39.06249993363167%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

GDPR compliance can be difficult. Users have data privacy rights and data processing principles under the law

[{"selector":"#anim-b3404647-91a7-4382-8c77-2bcde1486a08","keyframes":{"transform":["translate3d(-122.61484%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-5dbc5701-ec9d-41fd-925d-5b70df77f5a4","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-45556882-ae49-4da0-8ae6-4ef2045b2718 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.34967836769406%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

Just about any organization that handles EEA residents’ data is affected. GDPR covers schools, hospitals, and government agencies

[{"selector":"#anim-3dccc84f-d5f0-4afd-ac94-5d562721b9c9","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-440d1ebb-18c0-4bf5-8dc4-7f94f94223bd","keyframes":{"transform":["translate3d(-126.39405%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0b7524de-3803-4d74-824c-1f3edb51ba11 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

GDPR terminology is specific. Understanding these terms in this context helps organizations understand compliance requirements

[{"selector":"#anim-739a19ea-8fa5-4fb9-980e-b63e124f0436","keyframes":{"transform":["translate3d(-131.48789%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-bea8922a-689d-4528-b347-33a58b53bda3","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-fc56c5bf-165e-4410-8ab9-82afc804b268 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-35.024350558478986%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

The data owner is the data subject. Data refers to a person. Imagine a company collecting phone numbers for SMS marketing

[{"selector":"#anim-5657f4c3-4c67-4e9e-bc8e-0ed941718c97","keyframes":{"transform":["translate3d(-122.61484%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-16321068-61a3-48f0-8650-42a5480a4d52","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ebe97fb9-b530-412d-a5b6-38b013c5e701","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-72206b1e-ab04-4f67-b16e-109595cbf1bd [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.78483597324875%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Processing data includes collecting, storing, and analyzing it. Organizations or actors that perform such actions are data processors

[{"selector":"#anim-5fee2b04-b1d6-443f-9c05-4fee5914992e","keyframes":{"transform":["translate3d(-129.45736%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ff1ac93c-46df-4cea-b5a5-736da48cdc1c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-32ca4e22-0490-4102-b8d7-b82e00478f6f","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-80375ccf-48a4-485e-b0af-b8cb9ed8f59e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-31.284090795523493%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

A company that collects phone numbers and sends marketing messages is a controller and processor.

[{"selector":"#anim-cd7d7097-f8d0-4e3f-812a-430c27ff63a8","keyframes":{"transform":["translate3d(122.37762%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7db37a89-ebf2-49c4-8bed-eaaf2d57be17","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-eae2836b-0acd-44d8-a2da-c99c305cdaf5","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-b4d03f57-1d72-446a-a30a-4441a2cd08e0 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-36.201171791269246%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Supervision authorities enforce General Data Protection Regulation. All EEA countries have supervisory authorities For more details Govindhtech.com

[{"selector":"#anim-21d48e65-0a9e-47d8-af7f-e33a17460d8e","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-0b0793b3-27bb-486e-b4db-79243caea1e1","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-8c9d26a5-1207-4643-a09e-d5d336ea03f3 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]