Coming off the heels of the EU Article 29 Working Party Opinion on the Privacy Shield, the EU Parliament passed the General Data Protection Regulation (GDPR) early April 15, which overhauls the union’s Data Protection Directive rules set forth in 1995. This regulation applies to all business and organizations targeting EU consumers, regardless of their geographic location.
The legislation defines new data and privacy rights for EU individuals, regulates the transfers and processing of EU data, and sets forth more stringent enforcement of data handling, fining a firm in violation of the GDPR up to 4 percent of its total worldwide revenue.
