What you need to know.

Any company that collects or uses personal data for business purposes must comply with the new General Data Protection Regulation (“GDPR”). “Personal data” is a very broad concept and includes, for example, email addresses and phone numbers. The obligation to comply with the GDPR is therefore unavoidable. It is inconceivable to do business without processing personal data of customers and suppliers or personal data of employees.

What you need to do by 25 May 2018.

The processing of personal data triggers the application of the GDPR. The starting point of any compliance effort is the identification of the categories of personal data processed by your company, the so-called “data mapping”. Your company must include this information and more in a comprehensive overview, and this overview has to be properly documented.