1.Business requirements:
Organizations subject to GDPR oversight are responsible for the following:
Appropriate measures for protecting personal data.
Transparent data handling processes.
Ability to demonstrate compliance.
Accountability regarding data privacy governance.
2. Who has to comply?
GDPR applies to organizations involved in the following activities:
Processing of personal data in the EU.
Having subsidiaries, branches, representatives or agents in the EU.
Offering goods or services to individuals in the EU.
Monitoring the behavior of individuals in the EU.
3. What data does GDPR cover?
GDPR covers personal information which is defined broadly to include types of data that could identify an individual, including but not limited to:
Names
Addresses
Contact details
HR records
Device IDs
IP addresses
Cookies
RFID tags
Location data