What is the GDPR?

The GDPR, effective May 25, 2018, is a far-reaching regulation applicable to organizations with European Economic Area (“EEA”) based operations and certain non-EEA organizations that process personal data of individuals in the EEA. The EEA includes the 28 states of the European Union and four additional countries: Iceland, Liechtenstein, Norway and Switzerland. The GDPR aims to protect individuals’ fundamental rights to data protection and the free flow of personal data.