Back to Glossary
GDPR
GDPR is the acronym for the General Data Protection Regulation, a European Union law designed to protect the privacy of personal data. “Data” is defined broadly by the law, as anything relating to a person, whether it relates to public, professional, or personal life. This includes many types of information, including the following:
- Name
- Home address
- Email address
- Photograph
- Bank information
- Social networking posts
- Computer IP address
- Medical information
The law applies to all organizations that process or hold data related to European Union citizens that can be used to identify a person, either directly or indirectly. Obviously, businesses within the EU are subject to the law. But it goes further. Importantly, the GDPR also applies to organizations located outside of the European Union if they process or collect data of people living inside the EU. Thus, virtually any enterprise conducting business within the EU must comply with the law.
The penalties for non-compliance can be harsh, with a minimum fine of 20 million Euros for violations. Fortunately, ContractSafe simplifies GDPR compliance for companies.
Frequently Asked Questions
Does GDPR apply to companies outside the EU?
Yes. The regulation follows the data, not the company address, so an organization anywhere in the world falls under it when it processes personal data belonging to people in the EU. That catches e-commerce sellers, SaaS vendors, and marketers who track EU visitors. Location of your servers and headquarters doesn’t exempt you if you’re handling EU residents’ information.
What contract clauses does GDPR require with vendors?
When a vendor processes personal data for you, GDPR requires a written data processing agreement covering the subject matter and duration, the purpose and type of processing, confidentiality commitments, security measures, subprocessor rules, help with data subject requests, and deletion or return at the end. International transfers usually need standard contractual clauses or another approved safeguard on top.
How do you find every contract containing personal data terms?
Full text search across your whole contract set is the practical answer. Search for terms like personal data, data processing, subprocessor, and standard contractual clauses, then tag the agreements that hit so you can review them as a group. ContractSafe indexes the full text of every uploaded document, including scanned files, so these clauses turn up without opening each contract.
