On 25th May 2018, Regulation 2016/679 of the European Parliament and EU Council, also known as the General Data Protection Regulation (GDPR), will come into effect.
It is a fundamental regulation that will in some way affect all organisations: if they do not put in place adequate procedures or violate their obligations under the regulation, they will face severe sanctions. Regardless of their size, organisations can be given a fine of 4% of their turnover up to as much as €20 million.
GDPR will have a particular impact on online businesses. However, it will be reflected in the legal, IT, security and HR processes of all companies that process personal data.
