INTRODUCTION

Enforced from 25 May 2018, the European Union’s General Data Protection Regulation (GDPR) requires all data controllers and processors that handle the personal information of EU residents to protect the rights and freedoms of the people whose personal data they have been entrusted with, and to “implement appropriate technical and organisational measures […] to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services”. Failure to meet these requirements can result in fines of up to €20 million or 4% of annual global turnover – whichever is greater.

The GDPR is the latest step in the ongoing global recognition of the value and importance of personal information. Although the information ...

Get EU General Data Protection Regulation (GDPR) – An implementation and compliance guide, fourth edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.