Data governance - Standard
GDPR
(General Data Protection Regulation)
The UK and EU rules governing how organisations collect, use and protect personal information
What's it for?
Protects people's personal information by setting rules for how organisations may collect, use and store it.
For example…
Legal checks how a new staff tool will use and retain personal data.
GDPR means a company cannot collect personal data simply because it might be useful later; it needs a lawful purpose and appropriate safeguards.
Think of it like…
Strict rules for a shared address book: you may only keep what you need, say why you have it, and let people ask to be removed