Business Law Journal

If you are a smart phone user, you may have wondered why so many new privacy policies have recently rolled out.  The reason?  The General Data Protection Regulation (“GDPR”) became effective May 25, 2018, and applies to all organizations that handle European Union citizens’ data.  Businesses throughout the world, including in the US, are figuring out how to best navigate through what some have called one of the most important corporate compliance events in years, with several controversial provisions.  GDPR will substantially increase statutory obligations regarding the processing of personal data placed on data controllers and data processors both inside and outside the European Union.  A controller is the entity that determines the purposes, conditions and means of the processing of personal data, while the processor is an entity which processes personal data on behalf of the controller.