GDPR Compliances By Indian Companies - A Brief Overview

The introduction of European Union's ("EU") regulations on protection of natural persons with regard to processing of personal data and free movement of such data ("GDPR") has brought on certain significant implications on Indian entities processing personal data of EU Residents. Basically, since GDPR has extra-territorial application and applies to processing of personal data of EU residents even by entities situated outside EU, Indian entities who are acting as either a 'controller' (i.e. the person who determines the purposes and means of the processing of data) or a 'processor' (i.e. the person who processes the personal data on behalf of the controller), of personal data of persons of EU, in relation to offering of goods or services to such persons or monitoring their behaviour in so far as it takes place within EU, become subject to GDPR.