GDPR

The General Data Protection Regulation governs the processing of personal data of EU and EEA data subjects. It is a regulation, not a certification — compliance is demonstrated through documented proc

The General Data Protection Regulation governs the processing of personal data of EU and EEA data subjects. It is a regulation, not a certification — compliance is demonstrated through documented processes, DPAs, records of processing, and DPIAs. Penalties can reach the greater of €20M or 4% of global annual revenue.

Key controls

• Lawful basis for processing
• Data subject rights (access, rectification, erasure, portability)
• Records of processing activities
• Data Protection Impact Assessments
• Data Processing Agreements with sub-processors
• 72-hour breach notification