For many companies, the most important part of the privacy legislation is laid down in the General Data Protection Regulation (GDPR). The GDPR, which applies throughout Europe (and in certain cases beyond), imposes obligations on the person collecting personal data (the data controller) and creates rights for the data subject.
