What is GDPR?

GDPR stands for General Data Protection Regulation, the European Union’s law governing how personal data is collected, used, stored and shared. Applicable since 25 May 2018, it protects information relating to identifiable individuals, including names, email addresses, IP addresses and cookie identifiers.

The regulation applies across the EU/EEA. Organisations outside this area may also fall within its scope when they offer goods or services to people there or monitor their behaviour, as explained in the European Commission’s guidance on who the GDPR applies to.

GDPR compliance requires organisations to handle personal data lawfully, explain their practices, protect the information they hold and respect individuals’ data protection rights.