What does the GDPR regulate?

The GDPR regulates the "processing" of personal data, which includes the collection, use, disclosure, storage, manipulation, and erasure of personal data. The GDPR applies to companies that are established in the EU and to companies outside the EU if they process personal data in connection with (i) providing goods or services to individuals located in the European Economic Area (EEA) or (ii) monitoring individual behavior (for example, through online tracking), regardless of where the data is processed or stored.

Was this article helpful?
Have more questions? Submit a request
security personal data data collection data use gdpr regulation data store data data storage gdpr