The General Data Protection Regulation (“GDPR”) is the omnibus data protection law for the EU.   The GDPR establishes protections for the privacy and security of “personal data” of individuals located in the EU, known as “data subjects” under the GDPR.  It is important to note that data subjects enjoy this protection regardless of whether or not they are a citizen of any EU member state.  The GDPR applies to the “processing” of a subjects’ personal data, which is broadly defined to include collecting, organizing, structuring, storing, altering, retrieving, using, disclosing, transmitting, erasing or destroying that data.

Countries utilizing this law in the European Union