On 25 May 2018, the European Union introduced new data privacy laws.
The General Data Protection Regulation (GDPR) applies to all businesses processing the personal data of individuals residing in the EU, regardless of location and size of the business.
The GDPR may apply to you if:
Steps to becoming GDPR compliant:
- Make sure that your privacy policy is compliant with the GDPR
- Update your processes and systems on your website
- Store personal information in a readily available format
- Have processes in place for data breach notifications
What if you breach the GDPR?
Breaches of the GDPR can attract large fines - up to €20 million or 4% of the annual global turnover of the business in breach (whichever is greater), so it is important that your business is compliant.
