DSGVODatenschutzkonformität

DSGVO stands for Datenschutz-Grundverordnung, which is the German term for the General Data Protection Regulation (GDPR). The GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas. The primary objective of the GDPR is to give individuals control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

The regulation came into effect on May 25, 2018, after being adopted by the European Parliament and Council in April 2016. It replaced the Data Protection Directive of 1995. The GDPR applies to any organization, regardless of location, that processes the personal data of individuals residing within the EU and EEA. This includes aspects like data collection, storage, processing, and transfer.

Key principles of the GDPR include lawful processing, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. Individuals have enhanced rights, such as the right to access their data, the right to rectification, the right to erasure (the "right to be forgotten"), and the right to data portability. Organizations are required to implement appropriate technical and organizational measures to ensure data security and may face significant penalties for non-compliance.