GDPR
General Data Protection Regulation
European Union (Regulation (EU) 2016/679), enforced by national Data Protection Authorities
Why It Exists
To give individuals in the EU/EEA real rights over their personal data (access, correction, erasure, portability) and to force any organization processing that data to justify why, secure it properly, and report breaches quickly.
Who It's For
Any organization anywhere in the world that processes the personal data of people in the EU or EEA, regardless of where the organization itself is based. Highest-stakes for consumer tech, adtech, and healthcare.
Current Status
In force since May 25, 2018. It is EU law directly, not a certifiable standard, so there's no "version" to track; enforcement and guidance continue to evolve through DPA rulings and European Data Protection Board guidance.
General Data Protection Regulation (EU) 2016/679Frequently Asked Questions
Other Frameworks
KloudSec, built by the team behind Toc Consulting
See GDPR checked automatically, continuously
What you just read is a manual, one-time check. KloudSec runs this and 400+ more automated checks across 90+ AWS services, continuously, agentless, live in about 5 minutes.