Glossary
GDPR (General Data Protection Regulation)
EU privacy regulation governing personal data processing, rights, and safeguards.
GDPR sets rules for collecting and processing personal data of individuals in the EU/EEA. Key concepts: lawful basis, data minimization, purpose limitation, and data subject rights (access, deletion, portability).
Controllers and processors must implement security (e.g., ISO 27001 controls), handle cross-border transfers, and manage breach notifications. Privacy notices, DPAs, and retention schedules are essential artifacts.