GDPR

What Is GDPR?

The General Data Protection Regulation (GDPR) is a European Union (EU) legislation that is designed to sync data privacy, processing, and monitoring laws across the EU.

Put simply, it will regulate the data companies in and outside of the EU can collect, store and transfer related to EU residents - as well as how they use it. GDPR was adopted in May 2016 and goes into effect on May 25, 2018.

What Does GDPR Do?

GDPR was designed to protect the personal information of individuals who reside in the EU. It applies to EU-based organizations as well as organizations outside the EU that offer goods or services to or monitor the behavior of individuals in the Union. For more detailed information, visit EU Commission site.

What Exactly Is Personal Data?

Personal data includes any information that can be used to directly or indirectly identify a person. For instance, that could include their name, photo, email address, bank details, social media posts, medical information, or a computer IP address. Sensitive personal data is a subset of personal data, as defined under GDPR, such as gender or race.

What Does This Mean For EU Consumers?

The regulation gives individuals in the EU the right to increased control over what their personal data is used for. Organizations will need to provide notice and obtain consent before collecting and processing data. They must also disclose the purpose of personal data usage and define data retention and deletion policies. Security measures must be taken by those organizations to protect personal data, while they must maintain records of data processing and access and notify authorities of any data breaches.

What Does This Mean If You Live In The U.S.?

GDPR won't mean much to the average person in the U.S., as the regulation only applies to individuals that reside in the EU. But, U.S.-based businesses will have to become compliant if they offer goods or services to, or monitor the behavior of, individuals accessing their goods or services from the EU.

How Is United Franchise Group Readying For These Changes?

United Franchise Group is fully committed to complying with any relevant laws and regulations, including GDPR, to further strengthen our customers' confidence and trust. United Franchise Group has been consistent in its approach to data protection as part of our general product standards and this is now being extended to reflect new requirements of the GDPR. For more information about GDPR, please check the EU Commission site.