← Back to glossary

EU data protection regulation defining obligations and data subject rights.

Definition

The GDPR (EU General Data Protection Regulation) establishes principles, lawful bases, controller/processor duties, security requirements, breach notification duties, and rights for individuals.

In plain English EU data protection regulation defining obligations and data subject rights.

Why this matters

Why it matters: It shapes privacy practices worldwide and provides enforceable rights and accountability.

Example

Example: Controller responds to DSAR within required timelines and documents processing purposes.