New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
Iceland’s DPA signals continued focus on cybersecurity, health data, and AI governance
Persónuvernd’s annual report for 2025 shows an increasingly proactive approach to cybersecurity failings, AI oversight, and organizations handling sensitive data.
-
First DMA review finds positive impact, emphasizes enforcement and future compliance risks
European Commission finds Digital Markets Act (DMA) fit for purpose, signalling continued enforcement and focus on AI and cloud computing.
-
CCO in health: The compliance architect behind modern care
GRIP speaks with Erica Powers, former VP and head of compliance operations at Sage Therapeutics, to better understand the critical role CCOs play in today's healthcare landscape.
-
CHECKLIST: Is your AI meeting note-taker compliant?
A security checklist for regulated Industries.
-
Shadow AI: What AI meeting note-takers mean for regulated industries
It's the AI problem hiding in plain sight, says Manuela Bárcenas.
-
Operational resilience key to business survival, Insight says
AI has been the catalyst for an infrastructure rethink.
-
EU Commission proposals on digital sovereignty and high-risk vendors
Regulation to push European businesses and third-country suppliers to consider potential exposure to government influence when assessing their technology vendor relationships.
-
Evolving supervision, increased AI focus: Inside the Danish DPA’s latest annual report
Denmark’s Data Protection Authority has shifted towards stricter AI oversight, proactive GDPR regulation, and risk-based enforcement.
