The EU’s General Data Protection Regulation (‘GDPR’) has been in effect since the 25th of May, 2018. With its introduction, it replaced the old Data Protection Directive along with conflicting member state legislation.
GDPR is extensive and complex, affecting organisations that hold (control) and analyse or use (process) data of EU residents. Because of its wide scope, most businesses are impacted by its provisions.