GDPR Overview
The GDPR is a European data protection law (Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016) that became enforceable on May 25, 2018. The GDPR replaced the EU Data Protection Directive (Directive 95/46/EC), and harmonized data protection laws throughout the European Union (EU) by applying a single data protection law that is binding throughout each EU Member State.
The GDPR applies to:
Organizations in the EU that process personal data, regardless of whether the processing takes place in the EU.
Organizations outside the EU that process personal data of individuals located in the EU, where the processing relates to offering goods or services to or monitoring the behavior of individuals in the EU.
Personal data means any information relating to an identified or identifiable natural person. This includes names, identification numbers, location data, online identifiers, or factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
