{"id":9572,"date":"2021-06-08T15:20:37","date_gmt":"2021-06-08T12:20:37","guid":{"rendered":"https:\/\/snov.io\/knowledgebase\/?p=9572"},"modified":"2026-10-29T22:49:03","modified_gmt":"2026-10-29T19:49:03","slug":"what-is-the-gdpr","status":"publish","type":"post","link":"https:\/\/snov.io\/knowledgebase\/what-is-the-gdpr\/","title":{"rendered":"What is the GDPR?"},"content":{"rendered":"<p>GDPR (General Data Protection Regulation) is a current privacy law adopted by the European Union. GDPR is effective from May 25, 2018. Its purpose is to ensure the protection of the privacy and personal data rights of individuals who are EU citizens, also defined as data subjects.<\/p>\n<p><a href=\"#personal-data\">What is personal data<\/a><br \/>\n<a href=\"#who-gdpr-applies-to\">Who the GDPR applies to<\/a><br \/>\n<a href=\"#controller-and-processor\">Data controller and data processor<\/a><br \/>\n<a href=\"#seven-principles\">The seven principles of the GDPR<\/a><br \/>\n<a href=\"#fines\">Fines and administrative measures<\/a><\/p>\n<h2 id=\"personal-data\"><strong>What is personal data<\/strong><\/h2>\n<p>Personal data, or personally identifying data, is a very important term under GDPR. It means any information that relates to an individual with which they can be directly or indirectly identified. For example, personal data includes the following:<\/p>\n<ul>\n<li>names<\/li>\n<li>email addresses<\/li>\n<li>information regarding the person\u2019s location<\/li>\n<li>ethnicity<\/li>\n<li>gender<\/li>\n<li>web cookies<\/li>\n<li>political opinions and more<\/li>\n<\/ul>\n<p>Under the GDPR, any piece of data that makes it possible to identify a particular person is personal data.<\/p>\n<div class=\"notification-block learn\">\n<div class=\"notification-block__icon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/snov.io\/knowledgebase\/wp-content\/themes\/knowledgebase-n\/assets\/img\/fluent_chat-warning-16-regular.svg\" alt=\"learn\" width=\"32\" height=\"32\" \/><\/div>\n<div class=\"notification-block__text\">Pseudonymised data can also constitute personal data if it allows to identify an individual without much difficulty.<\/div>\n<\/div>\n<h2 id=\"who-gdpr-applies-to\"><strong>Who the GDPR applies to<\/strong><\/h2>\n<p>GDPR is applied to every company registered within the EU and any company that processes EU residents\u2019 personal data.<\/p>\n<h2 id=\"controller-and-processor\"><strong>Data controller and data processor<\/strong><\/h2>\n<p>There are two main roles for a company under the GDPR. These are the <strong>data controller<\/strong> and <strong>data processor<\/strong>. The data controller decides why and how personal data will be processed. The data processor is a person (a legal entity or an individual) that processes personal data on behalf of a data controller.<\/p>\n<h2 id=\"seven-principles\"><strong>The seven principles of the GDPR<\/strong><\/h2>\n<p>Article 5 of the GDPR defines seven principles for protection and accountability of personal data:<\/p>\n<ul>\n<li><strong>Lawfulness, fairness, and transparency:<\/strong> processing must be lawful, fair, and transparent (understandable) to the data subject<\/li>\n<li><strong>Purpose limitation:<\/strong> a company must process data for legitimate purposes and explicitly notify the data subject when such data is collected<\/li>\n<li><strong>Data minimization:<\/strong> a company should collect and process only as much data as is absolutely necessary for the purposes of personal data processing<\/li>\n<li><strong>Accuracy:<\/strong> a company must keep personal data accurate and up to date<\/li>\n<li><strong>Storage limitation:<\/strong> a company may only store personal data for as long as necessary for the purposes of personal data processing<\/li>\n<li><strong>Integrity and confidentiality:<\/strong> personal data processing must be done in a way to ensure appropriate security, integrity, and confidentiality of personal data<\/li>\n<li><strong>Accountability:<\/strong> a data controller must be able to demonstrate GDPR compliance with all of the GDPR principles to a competent data protection authority<\/li>\n<\/ul>\n<h2 id=\"fines\"><strong>Fines and administrative measures<\/strong><\/h2>\n<p>If a company fails to comply with GDPR, a competent data protection authority may either fine or undertake administrative measures against such a company.<\/p>\n<p>Administrative measures are described in <a href=\"https:\/\/gdprhub.eu\/index.php?title=Article_58_GDPR\" target=\"_blank\" rel=\"noopener\">Article 58<\/a> of the GDPR. For example, they include issuance of warnings and reprimands to a company or ordering the company to comply with the request of the data subject. Fines for failure to comply with the GDPR provisions are high:<\/p>\n<ul>\n<li>for significant violations, either 4% of annual global turnover or up to \u20ac20 million<\/li>\n<li>for other violations, either 2% of annual global turnover or up to \u20ac10 million<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>GDPR (General Data Protection Regulation) is a current privacy law adopted by the European Union. GDPR is effective from May 25, 2018. Its purpose is to ensure the protection of the privacy and personal data rights of individuals who are EU citizens, also defined as data subjects. What is personal data Who the GDPR applies [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[620],"tags":[],"_links":{"self":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts\/9572"}],"collection":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/comments?post=9572"}],"version-history":[{"count":1,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts\/9572\/revisions"}],"predecessor-version":[{"id":50506,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/posts\/9572\/revisions\/50506"}],"wp:attachment":[{"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/media?parent=9572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/categories?post=9572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/snov.io\/knowledgebase\/wp-json\/wp\/v2\/tags?post=9572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}