GDPR General Data Protection Regulation ( GDPR )
The new European Union data protection law is designed to allow individuals to have more control over their personal data and imposes new obligations on organizations that collect, manage or analyze such data, non-EU organizations included.
Privacy policyAll physical persons have the following rights:
- To access and export their personal data
- To delete their personal data at any time
- To object to the processing of their personal data
- To have their inaccurate or false data rectified
Checks and notificationsCompanies and organizations must:
- Protect any handled personal data by taking appropriate security measures
- Report to the responsible authorities, for any personal data breach and violations
- Obtain consent to the collection and processing of personal data
- Maintain records that provide detailed information about data processing activities
TransparencyCompanies and organizations must implement policies that:
- They will provide clear disclosure regarding data collection
- They will describe the reason and cases of processing personal data
- They will define data retention and deletion policies
- The "as much data as necessary" principle will be followed