General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR) is a regulation issued by European Union and that must be followed by services provided to European Union countries.

Because internet services tend to be global, in the end it must be accomplished by most electronic services around the globe.

GDPR requires that a Data Protection Impact Assessment (DPIA) is completed.

There may be specific regulation within each EU states members. For example, Spain has the General Regulation for Data Protection (in Spanish, Reglamento General de Protección de Datos, whose acronym is RGPD).

GDPR Transpositions

GDPR is complemented with national regulations:

Spain: Ley Orgánica de Protección de Datos-Garantía de Derechos Digitales (LOPD-GDD)

External References

• Cloud
  • Chapple et al.; “ISC2 CCSP: Official Study Guide – Third Edition”, pages 263-267; Wiley, 2022