thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

General Data Protection Regulation (GDPR)

EU regulation (2016/679), applicable since 25 May 2018, governing processing of personal data of individuals in the EU/EEA.

Definition

GDPR sets principles (lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; accountability), lawful bases, data subject rights, controller and processor obligations, breach notification, and restrictions on international transfers. It applies extraterritorially to organizations offering goods or services to, or monitoring the behavior of, people in the EU. Fines reach up to 20 million euros or 4 percent of worldwide annual turnover, whichever is higher.

Example

A US e-commerce site shipping to customers in France must comply with GDPR.

Exam tip

Know the seven principles in Article 5 and that accountability requires demonstrating compliance.

Related terms