What is GDPR?

GDPR stands for General Data Protection Regulation (GDPR). Its official title is "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC."

The GDPR defines the rights of citizens in the EU and the EEA concerning their personal data and outlines the procedures that institutions and companies must follow when handling and processing this data. It also covers the transfer of personal data outside the EU and the EEA.

Since 25 May 2018, the GDPR has been directly enforceable in all EU and EEA member states. It imposes obligations on businesses and organizations that process personal data of individuals within the EU, the EEA, and beyond. The GDPR applies to personal data, which includes any information that can be used to identify an individual.