# GDPR

> The EU's data-protection regulation — consent before collection, rights to access and deletion, breach notification in 72 hours, fines up to 4% of turnover.

GDPR applies to anyone handling EU residents' personal data, wherever the company sits. The core duties are simple to state and broad in effect: collect only what you need, say plainly what you do with it, keep it secure, and let people see, correct and erase their data.

For small businesses the practical load is a handful of honest documents — a privacy policy that describes reality, a cookie banner that actually gates trackers, a processor register, a way to answer deletion requests — plus security proportionate to what you hold. The 4% headline is for giants; small-firm fines still sting.

## Related terms

- https://dfieldsolutions.com/en/glossary/data-minimization.md
- https://dfieldsolutions.com/en/glossary/encryption-at-rest.md
- https://dfieldsolutions.com/en/glossary/incident-response.md

---

Source: https://dfieldsolutions.com/en/glossary/gdpr
DField Solutions — Dunakeszi, Hungary — dezso@dfieldsolutions.com
Booking: see https://dfieldsolutions.com/en/contact