# GDPR: EU General Data Protection Regulation

> The EU’s data protection law, which applies to anyone offering goods or services to, or monitoring, people in the EU.

URL: https://securei3.com/standards/gdpr/
Category: Global & regional laws: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


The General Data Protection Regulation sets principles for lawful, fair and transparent processing, grants individuals rights over their data, and requires organisations to demonstrate accountability.

We deliver data mapping and records of processing, lawful basis analysis, privacy notices, rights-handling procedures, DPIAs, processor agreements, transfer assessments and breach response playbooks, and can certify the resulting programme through ISO/IEC 27701.

## Who it is for

- Companies with EU customers, users or employees
- Processors serving EU-based clients
- Organisations transferring personal data out of the EU

## Benefits

- Reduced regulatory and contractual risk
- Accountability evidence for regulators and customers
- A privacy programme reusable for other laws

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Does GDPR apply to companies outside the EU?

Yes, if you offer goods or services to individuals in the EU or monitor their behaviour, or if you process personal data as a processor for an EU controller.

### What are the maximum GDPR fines?

Up to €20 million or 4% of worldwide annual turnover, whichever is higher, for the most serious infringements.

Related: https://securei3.com/standards/iso-27701/, https://securei3.com/standards/india-dpdp/, https://securei3.com/standards/uae-pdpl/, https://securei3.com/standards/ksa-pdpl/

Contact: https://securei3.com/contact/: info@securei3.com