General Data Protection Regulation
GDPREU-wide data protection law governing the processing of personal data of individuals in the EU/EEA. Sets strict requirements for consent, data subject rights, breach notification, and cross-border transfers.
Jurisdiction
European Union
Jurisdiction Type
supranational
Effective Date
5/25/2018
Enforcing Authority
National Data Protection Authorities (DPAs)
Maximum Fine
Up to €20M or 4% of annual global turnover
Fines Under This Regulation
0
Total Fine Amount (USD)
--
Privacy Topics
consentdata_subject_rightsbreach_notificationcross_border_transferdpoprivacy_by_designchildren
Key Articles
| Article | Description |
|---|---|
| Art. 5 | Principles of processing |
| Art. 6 | Lawful basis |
| Art. 7 | Conditions for consent |
| Art. 9 | Special categories |
| Art. 15 | Right of access |
| Art. 17 | Right to erasure |
| Art. 20 | Data portability |
| Art. 25 | Data protection by design |
| Art. 32 | Security of processing |
| Art. 33 | Breach notification to authority |
| Art. 35 | Data protection impact assessment |
| Art. 83 | Fines and penalties |
| Art. 12-14 | Transparency and information |
| Art. 44-49 | International transfers |