The cornerstone of modern data protection - governs how organisations collect, process and protect personal data of EU residents, anywhere in the world.
The General Data Protection Regulation (Regulation (EU) 2016/679) is the most influential privacy law in the world. It applies to any organisation that offers goods or services to people in the EU, or monitors their behaviour, regardless of where the organisation is based.
NexoPrivacy operationalises the GDPR through readiness assessments, Records of Processing Activities (RoPA), DPIAs, vendor due diligence, cross-border transfer mechanisms (SCCs, BCRs, TIAs) and a programme of continuous monitoring.
The UK's post-Brexit data protection regime - closely mirrors the EU GDPR with UK-specific nuances.
Read summary