GDPR: The Regulatory Iceberg of 2018
You're heading into dangerous waters. On May 25, 2018, the European Union (EU) General Data Protection Regulation (GDPR) goes into full effect, and it will almost certainly affect you. If you are not compliant with the GDPR by this date, you could face fines of up to 20 million Euros or 4% of worldwide annual revenue per breach . So it's important to understand whether the GDPR applies to your business, and if it does, what you must do to comply. It probably applies to YOU The GDPR is a comprehensive regulation meant to protect the personal data of EU citizens, wherever that data might be processed . It greatly expands the geographical scope of the EU data protection laws. In fact, the GDPR applies not only to organizations located within the EU, but also to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of, EU residents. So US-based companies will need to comply with the GDPR if they are doing business (or attemp