EU GDPR eDiscovery — Top Ten Tips For Litigators

Overview (10. – 6.)

10.    The European Union (EU) General Data Protection Regulation (GDPR) went into effect on May 25, 2018.   It applies to the processing of "personal data" of EU citizens and residents (a/k/a "data subjects"). A major stick to force compliance is that, now the penalty for a company's violation of GDPR could be as high as the greater of: 4% of a business' worldwide gross revenue; or €20 Million ( ≈ $24 Million).

9.     "Personal data" is defined much more broadly than under U.S. privacy law to include "any information relating to an identified or identifiable natural person." That could include work email addresses, communications and more that are tied to a unique individual. The law imposes restrictions on collecting and "processing" (also broadly defined) personal data of