General Data Protection Regulation (“GDPR”)

  What is it?   Since the 25th of May 2018 the General Data Protection Regulation (“GDPR”), governs the processing and transfer of personal data of natural persons. Does it apply to me? It applies to undertakings (including natural and legal entities e.g. companies) which: process personal data as part of the activities of one of their branches established in the European Area  (“EEA”), irrespective of where the processing takes place; or  offer goods/services to, or monitor the behavior of individuals in the EEA despite being outside the EEA (Art. 3 GDPR).   Why is it important?  The burden of proof has shifted from the supervisory authority...

Continue reading