RGPD / GDPR
GDPR (General Data Protection Regulation, known as RGPD in French) is the European regulation, in force since May 2018, that governs the processing of personal data of European Union residents - regardless of the countr…
GDPR (General Data Protection Regulation, known as RGPD in French) is the European regulation, in force since May 2018, that governs the processing of personal data of European Union residents - regardless of the country where the processing organisation is based.
It grants a set of rights to individuals (access, rectification, erasure, portability, objection) and sets obligations on organisations: a legal basis for each processing activity, privacy by design, a processing register, a Data Protection Impact Assessment (DPIA) for risky processing, breach notification within 72 hours, appointment of a DPO in some cases.
Fines can reach 20 million euros or 4% of global turnover. The CNIL is the supervisory authority in France.