What is General Data Protection Regulation (GDPR)?
In short
The General Data Protection Regulation (GDPR) is the European Union law governing personal data. It applies to organizations in the European Union and to those elsewhere that offer goods or services to, or monitor, people in the European Union.
Key takeaways
- Breaches that pose a risk to individuals must generally be reported to the supervisory authority within 72 hours.
- Individuals have rights such as access, rectification, erasure and data portability.
- Fines can reach 4% of worldwide annual turnover or €20 million, whichever is higher.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A US online retailer with no offices in Europe sells goods to customers in France. Does the European Union's General Data Protection Regulation (GDPR) apply to its processing of those customers' personal data?