Question 1

Does GDPR apply to US companies?

Accepted Answer

Yes. GDPR applies to any company that processes personal data of EU residents, regardless of where the company is based.

Question 2

What is a Data Processing Agreement (DPA)?

Accepted Answer

A DPA is a contract required by GDPR between a data controller and a data processor. If you share EU personal data with a third-party vendor, you need a signed DPA with each of them.

Question 3

What is the GDPR fine for non-compliance?

Accepted Answer

GDPR fines can reach 4% of global annual turnover or €20 million, whichever is higher.

Question 4

How quickly must you report a GDPR data breach?

Accepted Answer

You must report a personal data breach to your supervisory authority within 72 hours of discovering it, if it is likely to risk individuals rights and freedoms.

GDPR Compliance Checklist

GDPR controls self-assessment