GDPR (General Data Protection Regulation)

The General Data Protection Regulation (EU 2016/679) governs the processing of personal data of people in the European Union. Article 25 requires data protection by design and by default. Fines for the most serious infringements can reach €20 million or 4% of worldwide annual turnover, whichever is higher. Under Article 3(2), GDPR also applies to organizations outside the EU when they offer goods or services to people in the EU or monitor their behaviour there.