What is the GDPR?

The General Data Protection Regulation (GDPR) (EU) 2016/679 is a data protection and privacy regulation for all individuals within the European Union. It came into force across the European Union on 25 May 2018.

A data subject (“individual”) has the following rights under the GDPR:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure/right “to be forgotten”
• the right to restrict processing
• the right to data portability
• the right to object
• rights in relation to automated decision-making and profiling