Artificial Intelligence
Trending
What the EU AI Act Means for US Companies
When a US business falls under the EU AI Act, how the 4 risk tiers work, the updated 2026-2028 deadlines after the Digital Omnibus, and what to do first.
Cybersecurity
What is GDPR?
Quick answer
General Data Protection Regulation: the European Union's law governing how organizations collect, use, and protect personal data.
GDPR, explained
GDPR took effect in May 2018 and applies to any organization that processes the personal data of people in the EU, even if the organization is based elsewhere. That is why many websites worldwide display cookie consent banners and privacy notices.
Key principles include collecting only the data you need, having a lawful basis such as consent or contract, keeping data secure, and being transparent about its use. Individuals gain rights to access their data, correct it, request deletion, and object to certain processing. Organizations must report certain data breaches to regulators, typically within 72 hours of becoming aware of them. Serious violations can lead to large fines. GDPR has influenced privacy laws in many other countries.
Related terms
Data Breach
An incident in which sensitive, protected, or confidential information is accessed, stolen, or disclosed without authorization.
Data GovernanceThe policies, roles, and processes that determine how an organization's data is managed, protected, accessed, and kept accurate.
EncryptionThe process of converting readable data into scrambled ciphertext that only someone with the correct key can decode.
Federated LearningA machine learning approach where models are trained across many devices or servers without moving the raw data to a central location.
Personally Identifiable InformationAny information that can identify a specific person, alone or combined with other data, such as a name, email, or ID number.
Web CookieA small text file a website stores in your browser to remember information such as login status, preferences, or shopping cart contents.
Guides that mention GDPR
How to Create a Data Retention Policy (With a Template)
A step-by-step guide and template for writing a data retention policy, covering data categories, US retention periods to check, deletion procedures and legal holds.
Blockchain in Healthcare: Promise vs Practice
Where blockchain actually fits in healthcare, from drug tracing to provider data, why patient records rarely belong on a ledger, and how HIPAA shapes every design.