GDPR (General Data Protection Regulation)

The General Data Protection Regulation (Regulation (EU) 2016/679) is the EU's principal data-protection law, in force since 25 May 2018. It applies to controllers and processors of personal data of EU/EEA data subjects regardless of where the processing takes place. Penalties reach 4% of annual global turnover or EUR 20 million, whichever is higher.