GDPR (General Data Protection Regulation)

The GDPR (General Data Protection Regulation, EU Regulation 2016/679) is the European regulation governing the collection, processing and storage of personal data in the EU. It applies to any organisation processing data of EU residents, regardless of its location. It requires in particular the conclusion of a DPA with processors, data minimisation and respect for individuals' rights (access, rectification, erasure).