The GDPR (General Data Protection Regulation) will come into effect in May 2018 and many of our partners are wondering what exactly it is and how it can impact their business.
What is the GDPR anyway?
The GDPR (General Data Protection Regulation) is a new EU Regulation which will replace the 1995 EU Data Protection Directive (DPD) to significantly enhance the protection of the personal data of EU citizens and increase the obligations on organisations who collect or process personal data. It will come into force on 25th May 2018. The regulation builds on many of the 1995 Directive’s requirements for data privacy and security, but includes several new provisions to bolster the rights of data subjects and add harsher penalties for violations.
Does the GDPR apply to me?
While the current legislation, the 1995 EU Data Protection Directive, governs entities within the EU, the territorial scope of the GDPR is far wider, in that it will also apply to non-EU businesses who market their products to people in the EU or who monitor the behavior of people in the EU. In other words, even if you’re based outside of the EU but you control or process the data of EU citizens, the GDPR will apply to you.
Keeping you up to date on GDPR
We want to be as transparent as possible with our partners during this transition period, so we've just launched a dedicated section on HubSpot.com to explain the topic in more detail and clarify how we'll be compliant with the regulation once it comes into effect. Be sure to bookmark this page as we'll be updating it between now and May 2018 with more useful content and updates about the changes we'll be making to comply with the GDPR. We've also created a simple checklist to help you assess your readiness for GDPR.
P.S: Are you attending Partner Day @ INBOUND? Don't miss John Kelleher's session on GDPR at 3:15pm on Monday, 25th September in the Cambridge room.