EU Data & AI Acts
GDPR
General Data Protection Regulation
The EU's personal data regime: lawful basis, purpose limitation, data minimisation, data subject rights, records of processing, transfer rules, and breach notification within 72 hours.
For a data platform it is the source of most catalogue metadata obligations you cannot avoid: what personal data you hold, why you hold it, who it goes to, and how long you keep it. ISO/IEC 27701 and the EU Cloud Code of Conduct are the usual ways of evidencing it.
At a glance
- Category
- EU Data & AI Acts
- Jurisdiction
- EU
- Governance
- European Union
- Status
- Regulation (EU) 2016/679; applicable since May 2018
- First released
- 2016
Links
Related regulation
Other entries under EU Data & AI Acts.
See GDPR in context
Open the interactive Data Landscape for Regulation to compare GDPR against every other framework, or grab the raw JSON. Certification schemes and editions move — follow the source links before relying on this page.