March 12, 2018
UPDATED CLIENT ALERT: Europe’s New Data Privacy Regulation
The countdown is (nearly) over. On May 25, 2018, the General Data Protection Regulation (GDPR) will go into effect, mandating stricter privacy and data protection requirements for any company doing business in the EU or handling the online data of EU residents. The sweeping regulation may impact a significant number of U.S. companies that would not typically expect to be subject to EU law. Smaller and mid-size companies that handle relatively small amounts of EU data may be surprised to learn that they fall within the scope of the GDPR.
Next Steps. Organizations should take immediate steps to assess whether they are subject to the GDPR. If your business has customers or subsidiaries in the EU, advertises goods or services to EU residents, or collects or analyzes the online data of EU residents, compliance with GDPR’s requirements is likely necessary. Companies should also assess whether their third party vendors are compliant.
If you have any questions regarding GDPR compliance, please contact Rudy E. Verner at BHGR Law at 303-402-1600.
This article is intended to provide general information and, therefore, should not be treated as legal advice. If you have questions about a specific legal issue, you should seek the advice of a qualified attorney.