The Reach of the EU GDRP in Canada

On May 25, 2018, the General Data Protection Regulation (GDPR) will impact companies in Europe and around the world. The penalties for violating are potentially severe – Fines of €20 million or 4% of your annual worldwide revenue (whichever is higher).

Your digital media or advertising businesses in Canada will be directly impacted by the GDPR if

your company processes personal data of EU residents where the processing relates to:

● offering goods or services to individuals in the EU; or

● monitoring the behaviour of individuals in the EU on the internet, which may include tracking for behavioural advertising purposes.

The GDPR sets out a holistic set of rules governing the collection, creation, use, disclosure, storage and other processing of “personal data”, a concept defined broadly as “information about an identified or identifiable natural person”.  GDPR’s rules are prescriptive, and need to be operationalized across your company’s systems and processes. Considerable time and organizational effort is required to comply with this statute.

Please click here to download the following checklist of 13 key steps for your company GDRP compliance efforts.