European Union Introduces Sweeping Data Protections

The European Union is implementing its new General Data Protection Regulation, a comprehensive set of rules for data protection and privacy for all individuals within the EU. The regulations cover the export of EU citizen’s personal data outside the Union, and include provisions to simplify the regulatory environment for international business.

When the regulations go into effect, all data controllers – entities that collect individuals’ data – are required to demonstrate a “reasonable level”of personal data protection, meeting specific requirements outlined in the law. Repeated or intentional failure to do so can result in the organization being fined up to € 20 million or up to 4 percent of its annual worldwide sales.

For more information visit eugdpr.org.