General Data Protection Regulation (GDPR)

The GDPR updates and overhauls European data protection law. The GDPR places new and enhanced, ongoing obligations on all organisations with serious sanctions for breaches including fines of up to 4% of global turnover or €20m, whichever is greater. The GDPR replaces the European Data Protection Directive (95/46/EC), which dates back to 1995. While many fundamental concepts and principles remain broadly the same, the GDPR provides for significant changes which involve wide ranging impacts on a broad range of sectors.