🇪🇺
European Union
General Data Protection Regulation (GDPR)
Europe🟢 Comprehensive
Compliance Score
86%
12 Addressed
2 Partial
0 None
Authority
European Data Protection Board (EDPB)
Overview
The GDPR is the world's most influential data protection framework. It provides comprehensive rights to individuals, imposes strict obligations on data controllers and processors, and established the One-Stop-Shop mechanism for cross-border enforcement.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
AddressedData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the maximum penalty for a data breach under GDPR?+
Under the GDPR, organizations can be fined up to €20 million or 4% of their global annual turnover (whichever is higher) for the most serious violations, including failure to protect personal data or unlawful processing.
Is data localisation required under GDPR?+
No. GDPR does not require data localisation. In fact, it promotes the free flow of data within the EU. However, transfers outside the EU require an adequacy decision or standard contractual clauses (SCCs).
Is a DPO mandatory under GDPR?+
A Data Protection Officer (DPO) is mandatory for public authorities and organizations whose core activities involve regular and systematic monitoring of data subjects on a large scale, or large-scale processing of sensitive data.
Who enforces GDPR?+
The GDPR is enforced by the European Data Protection Board (EDPB) and national supervisory authorities (like the CNIL in France) in each EU member state.