GDPR is designed to give all European Union citizens more control over their personal data while increasing obligations for organizations (wherever situated) that collect or process this data. https://infogram.com/gdpr-2-minute-guide-to-learn-and-take-action-1hxj48rq35z56vg

1. The definition of personal information is now broader and includes (but is
not limited to) identifiers such as:
Individual's rights under GDPR
Fines up to 4% of annual global revenue or $20
million - whichever is greater.
General Data Protection Regulation
GDPR
The General Data Protection Regulation (GDPR) will:
2 minute guide to learn and take action
Coming into force:
25th May 2018
The regulation applies to all companies that process personal data
from individuals in the European Union.
The EU represents 22% of
the global economy.
There are 508 million people
living in the EU.
Non-compliance penalties:
Personal data breaches must be reported to the
supervisory authority and individuals within
72hrs after first becoming aware of it.
stores EU citizen data
Protect European
citizens' private
electronic
information
Name
stores EU citizen data
monitors web interactions
stores EU citizen data
Explicit Consent
Consent is informed in "clear and plain language". Consent to
collect can be withdrawn at any time.
Resources and information provided should be used as support only. Please request
professional advice on how to comply with GDPR.
This infographic was created using
Change the way
organizations
approach data
privacy
Harmonize data
privacy
across Europe
Give more power to
regulatory bodies to
take action against
organizations
Simplify and unify the
regulatory environment
within the European
Union (EU)
Why it matters to you and your business?
What personal data does the GDPR aim
to protect?
Biometric
data
Location
data
Financial
data
IP address Genetics Health Cookies
Transparency
Individuals have the right to know why, how and what
personal data is being collected and how it is processed.
The Right to Be Forgotten
The right to withdraw consent and request
data deletion.
Data Portability
The right to transfer personal data from one electronic
system to another.