Cybersecurity glossary
What is GDPR?
Also known as: General Data Protection Regulation
Definition
The General Data Protection Regulation (GDPR) is the European Union’s law on the processing of personal data, including security and breach notification duties.
Why it matters
Article 32 requires appropriate technical and organizational security measures, and Article 33 requires notifying the supervisory authority of qualifying personal data breaches without undue delay and, where feasible, within 72 hours. It can apply to organizations outside the EU.
Common questions about GDPR
See also
Sources
Related Guides
GuideGRC
7 Steps for GDPR Data Breach Response: A Tactical Plan
Execute a compliant GDPR data breach response with this 7-step guide covering containment, risk assessment, supervisory notification, and internal logging.
Read more GuidePersonal Security
How to Secure Accounts: What to Do After a Data Breach
Learn what to do after a data breach exposes your personal information. Follow these practical steps to secure your logins, freeze credit, and stop fraud.
Read more