Randall

In May 2018, the European Union passed the General Data Protection Regulation, or GDPR. This law strengthens EU data protection rules by giving individuals more control over their personal data.

The GDPR replaces the 1995 Data Protection Directive.

The GDPR applies to any company that processes the personal data of individuals in the EU, regardless of where the company is located. Companies that process the personal data of EU citizens must comply with the GDPR unless they can demonstrate that they meet certain conditions.

The GDPR requires companies to get explicit consent from individuals before collecting, using, or sharing their personal data. Companies must also provide individuals with clear and concise information about their rights under the GDPR.

The GDPR imposes significant fines for companies that violate its provisions. Companies that violate the GDPR may be subject to penalties of up to 4% of a company’s global annual revenue or €20 million (whichever is greater), whichever is greater.

The GDPR has been met with widespread criticism from companies and privacy advocates. Many companies have said that the GDPR is too complicated and restrictive, and that it will lead to widespread confusion among companies about how to comply with the law.

The GDPR has been passed in the European Union.