ABSTRACT
The General Data Protection Regulation (GDPR) contains rules about when and under what conditions it is permitted to collect, store, analyse and use personal data. Virtually every person and every organisation processes personal data: an online advertising company, a governmental organisation that registers car ownership, a school teacher who gives grades to students or a private person posting a photo of her friends on Facebook.
