Questions and answers on the rules and your obligations
Select one of the topics below to find relevant information for businesses and organisations.
Information on what constitutes personal data and processing under the GDPR and which businesses and organisations the regulation applies to.
An overview of the key principles that govern how personal data can be collected, processed and kept under the GDPR.
Information on how businesses and organisations can process data lawfully, including consent, legitimate interest, and rules for sensitive data.
Information on your obligations when processing data, including informing individuals, data security, notifying data breaches, and the role of a data protection officer.
Main aspects of the GDPR that a public administration should be aware of, including rules on data processing, handling requests from individuals, and compliance.
Information on how EU data protection rules are enforced and on what happens if your company or organisation fails to comply with the rules.
How to deal with requests from individuals exercising their data protection rights.