The EU General Data Protection Regulation 2016 (GDPR) will come
into effect on 25 May 2018. The GDPR aims to protect EU
individuals' data privacy rights and targets organisations
located both within and outside the EU. If your organisation,
despite not having an establishment in the EU, offers goods or
services to or monitors the behaviour of individuals in the EU, you
may need to comply with the GDPR.
The most eye-catching feature of the GDPR is the introduction of
maximum fines of up to the higher of 4% of a data controller's
worldwide turnover and €20m. Technology has transformed the
way business is being done now. Companies can easily provide goods
or services to customers with little geographical limitations. It
is therefore high time for you to consider if and how the GDPR may
apply to your organisation.
