General Data Protection Regulation (GDPR) 2016/679

EU lacked consistent data protection standards across member states.

Key Obligations

["Lawful basis for processing personal data", "Data subject rights (access, erasure, portability)", "72-hour breach notification", "DPA with processors", "Cross-border transfer mechanisms"]

Penalty Ranges

{"tier_1": "\u20ac10M or 2% global turnover", "tier_2": "\u20ac20M or 4% global turnover"}

Mandatory Deadline: 2018-05-25

Affected HS Codes: []

Issuing Authority: European Data Protection Board (EDPB)