The General Data Protection Regulation (GDPR) is the toughest privacy and security law in the world. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU. The regulation was put into effect on May 25, 2018. The GDPR will levy harsh fines against those who violate its privacy and security standards, with penalties reaching into the tens of millions of euros. As a company, we must always be aware if we are breaking this law without protecting our customers' data or not being transparent enough with them. All those responsible for the use of personal data must follow strict rules called 'data protection principles. They must make sure the information is:• used fairly, legally, and transparently• used for specific and explicit purposes• used appropriately, relevantly, and limited only to what...
