Glossary: GDPRGlossary

The GDPR (General Data Protection Regulation), is a regulation in the European Union (EU) that sets out how personal data of individuals in the EU can be collected, used, and stored. It's considered one of the most comprehensive data privacy laws in the world, and it has had a significant impact on how organizations around the globe handle personal data.

Here are some key points about the GDPR:

• Who it applies to: The GDPR applies to any organization that processes the personal data of individuals in the EU, regardless of where the organization is located. This includes businesses, government agencies, and non-profit organizations.

• What it protects: The GDPR protects a wide range of personal data, including names, addresses, email addresses, phone numbers, IP addresses, and health information.

• Key rights for individuals: Under the GDPR, individuals have a number of rights in relation to their personal data, including the right to access their data, the right to rectification (correction), the right to erasure (deletion), the right to restrict processing, the right to data portability, and the right to object to automated decision-making.

• Obligations for organizations: Organizations that are subject to the GDPR have a number of obligations, including: ◦ Lawful basis for processing: Organizations must have a legal basis for processing personal data, such as consent, contractual necessity, or a legitimate interest. ◦ Data minimization: Organizations should only collect and process the personal data that is necessary for the specific purposes for which it is being processed. ◦ Security measures: Organizations must implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. ◦ Data breach notification: Organizations must notify individuals and the relevant authorities in the event of a data breach.

Here are some resources where you can learn more about the GDPR: • Official GDPR website: https://gdpr.eu/what-is-gdpr/ • European Commission website on GDPR: https://gdpr.eu/what-is-gdpr/