INTRODUCTION

Enforced from 25 May 2018, the European Union’s General Data Protection Regulation (GDPR) requires all data controllers and processors that handle the personal information of EU residents to “implement appropriate technical and organisational measures […] to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services” or face fines of up to €20 million or 4% of annual global turnover – whichever is greater.

The GDPR is the latest step in the ongoing global recognition of the value and importance of personal information. Although the information economy has existed for some time, the real value of personal data has only become more recently evident. Cyber theft of personal data exposes ...

Get EU General Data Protection Regulation (GDPR), third edition - An Implementation and Compliance Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.