Still Confused About GDPR? The EU Thought So
The European Data Protection Board issues draft guidelines to help EU outsiders understand their obligations.
In late November, the European Data Protection Board (EDPB) issued draft guidelines to help -- at least a bit -- entities outside the EU define their responsibilities and obligations under the EU’s General Data Protection Rule (GDPR). Since GDPR took effect in May, enterprises worldwide that held or hold private information belonging to EU citizens (and yes, I know that based on the day, who is and isn’t an EU citizen is a bit of a moving target) have had to either take prescribed steps to avoid rules violations or simply be nervous that they might be caught non-compliant and forced into massive penalties and subsequent costly remediation.