The EU General Data Protection Regulation 2016/679 (GDPR) applies from 25 May 2018. The first thing for non-EU businesses to consider is whether any of your business is within the general scope of the GDPR. It applies to the processing of personal data:

• in the context of the activities of an establishment of a Controller or a Processor in the EU, whether or not the processing takes place in the EU; or
• of data subjects who are in the EU by a Controller or Processor not established in the EU where the processing relates to the offering of goods or services (whether free or paid for), or the monitoring of behaviour, which takes place within the EU.

The Infographic below outlines 14 steps you need to be aware of and gives a brief outline of some of the things you need to do.

We have developed a GDPR compliance toolkit. If you would like further information on the points outlined below, please click here to download a full version of the guide.