General Data Protection Regulation

Definition: the General Data Protection Regulation (RGPD or GDPR in English) entered into force on May 25, 2018. Its objective is to strengthen the control of personal data by citizens. It applies to all brands having an activity within the European Union. In France, this is the replacement of the Data Protection Act of 1978, which gave birth to the CNIL. 

The use of personal data without the prior consent of citizens now exposes brands to heavy penalties of up to 20 million euros or 4% of their worldwide turnover, to which will be added negative impacts on their image.