Page 18 - CSI - Cisco Security Instroduction - BT

What is GDPR?

General Data Protection Regulations

• New EU wide data protection framework

• Covers all forms of Personally Identifiable

Information (PII), including biometric, genetic and

location data

• Applies to all organisations processing the data of EU

citizens – wherever those organisations are

geographically based

• Focus on the rights of data subjects, obligations on

controllers and processors, including privacy by

design

• Fines to take into account ‘the technical and

organisational measures implemented…’

21