GDPR (General Data Protection Regulation)
The data protection law governing how organisations handle personal data of people in the UK and EU.
GDPR (and the UK GDPR/Data Protection Act) sets rules for collecting, storing and processing personal data, with requirements around consent, security, breach notification and individuals’ rights. Non-compliance risks heavy fines. Startups handling user data must build compliance in from the start.
Examples
A startup appoints a data lead and writes a privacy policy to meet GDPR. — A SaaS firm signs data processing agreements with customers.
How it relates to The Startup Foundry
Compliance reduces risk that surfaces in due diligence. The Foundry helps you present a well-run, investable business.