What is Personal Data?

The GDPR is, in large part, an evolution of the 1995 Data Protection Directive upon which most of Europe’s national laws on data protection are based. Among the most notable changes are the penalties for non-compliance, the reach of the regulation, the expanded rights for individual data subjects, the requirement for consent, and added responsibilities for reporting problems and documenting compliance.

Individual rights: The new regulation also codifies the rights of individuals with regard to their personal data, including among others the right of access to information collected about them, the right to correct their information, the right to notification, the right to be forgotten.

This graphic originally appeared in AESC's Executive Talent Magazine article, "GPDR and AESC."