THREAT‑WATCH
Glossary
GDPR
The EU's General Data Protection Regulation, setting rules for how organizations collect, use, and protect personal data.
GDPR applies to any organization processing the personal data of EU residents, regardless of where the organization itself is based. It requires a lawful basis for processing, gives individuals rights over their data (access, correction, deletion), and mandates breach notification to authorities within 72 hours of becoming aware of a qualifying breach. Penalties can reach up to 4% of global annual revenue.