Vendor Selection & GDPR Compliance

The Global Data Protection Regulation (GDPR) is changing how the world approaches data protection in the digital age. It does so by returning control of personal data to EU data subjects, and emphasizes data subject consent, the right to erasure, and the security measures needed to protect the data organizations control, process, store, and collect from EU citizens and residents. The GDPR is applicable to all organizations that handle any data of EU data subjects (yes, that includes email addresses!); it doesn’t matter if your organization has locations in the EU or not — if you handle EU citizen data, the Regulation applies to you.