GDPR (General Data Protection Regulation)
European privacy law governing how organizations collect and process personal data.
Definition
GDPR is the European Union's comprehensive data protection law that gives individuals rights over their personal data and imposes obligations on organizations that collect or process that data. It applies to any organization serving EU residents, regardless of location.
Key requirements include consent, data access rights, breach notification, and privacy by design.
Why It Matters
GDPR non-compliance carries fines up to 4% of global revenue or €20 million. Beyond penalties, privacy-respecting practices build customer trust.
GDPR has influenced privacy legislation worldwide, making its principles increasingly universal.
Examples in Practice
A website implements a cookie consent banner that allows granular control over tracking preferences.
A company appoints a Data Protection Officer and creates processes for handling data subject access requests.
Privacy by design principles shape a new product's data collection and retention practices from the start.