Zansa › Answers › Privacy, security and ownership
What is GDPR and does it apply to a small business?
GDPR is the European Union's General Data Protection Regulation. It governs how personal data of people in the EU is collected and used, and applies to organisations of any size, including small businesses, that offer goods or services to people there or monitor their behaviour. This is general information, not legal advice.
Core principles include lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability. Individuals have rights such as access and erasure.
Small organisations get some relief on record-keeping in certain cases, but not an exemption from the core principles. Whether GDPR applies to you depends on where your customers are and what you do with their data, so check with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call