Having enjoyed two decades of relatively settled data protection laws, companies doing business in (and into) Europe are now faced with a sweeping overhaul of existing rules and principles which will have a significant impact on the ways in which they use personal data.
Impacted companies, both inside and outside the EU, must now prioritise their preparations for the introduction of the EU General Data Protection Regulation ("GDPR") on 25 May 2018. The potential penalties for non-compliance with the GDPR include fines of up to €20 million or 4% of global turnover for non-compliance.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.