The GDPR Framework

The General Data Protection Regulation — GDPR — replaced the 1995 Data Protection Directive and became enforceable on May 25, 2018. It is one of the most significant pieces of privacy legislation in history, and its reach extends far beyond Europe. If your organization offers goods or services to people in the EU or EEA, or monitors their behavior, GDPR applies to you — regardless of where your company is headquartered. A software company in California, a retailer in Tokyo, or a consulting firm in Dubai all fall under GDPR if they process EU residents' data.