The EU's General Data Protection Regulation safeguards your digital rights and privacy across all member states.
Data processing must be lawful, transparent, and based on valid legal basis.
Data must not be processed beyond its original intended purpose.
Only collect and store the minimum necessary data for a given purpose.
Data should not be stored longer than necessary for the defined purpose.
Ensures data is protected against unauthorized access or breach.
Organizations must demonstrate compliance through documentation and auditing.
You can request access to your personal data.
Ask for incorrect data to be corrected.
Request deletion of personal data where permissible.
You must be informed when organizations collect or use your data.
GDPR protects any data that can identify a living person directly or indirectly (direct identifiers include name, address), including online identifiers like IP addresses or cookies.
The 27 EU data protection authorities monitor businesses and report enforcement actions to the European Data Protection Board (EDPB).