Regulatory & compliance All sectors
GDPR
Also called: General Data Protection Regulation · RGPD
Last updated
What is the GDPR?
The GDPR (General Data Protection Regulation; in French, RGPD) is European Regulation (EU) 2016/679, which governs the collection and processing of personal data. In force since May 25, 2018, it is enforced in France by the CNIL.
It imposes principles — purpose limitation, data minimization, limited retention, security — and rights (access, rectification, erasure). Within a company, it also covers employee data: contact details, photos, geolocation, and content shared internally.
Related terms