Glossary / Compliance & operations

GDPR (General Data Protection Regulation)

GDPR is the EU's data-protection law, and it applies to any business anywhere that handles EU residents' personal data. Its core demands: a lawful basis for processing, real consent, the right to access and erase one's data, breach notification, and privacy designed in rather than bolted on. Compliance is mostly good engineering — knowing what data you hold, why, and being able to delete it on request.