GDPR
GDPR
ELI5 — The Vibe Check
GDPR (General Data Protection Regulation) is the EU's big rulebook for protecting people's personal data. If you collect data from EU residents, you must ask for permission, let people see what you have on them, delete it on request, and report breaches within 72 hours. Breaking the rules means fines up to 4% of global revenue.
Real Talk
GDPR (General Data Protection Regulation) is an EU regulation governing the collection, processing, and storage of personal data of EU residents. It requires lawful basis for processing, explicit consent for sensitive data, data subject rights (access, erasure, portability), and mandatory breach notification within 72 hours.
When You'll Hear This
"Add a GDPR-compliant cookie banner before launch." / "The GDPR fine for the breach was €20 million."
Related Terms
Compliance
Compliance means following the rules — legal, industry, or governmental standards that say how you must handle data and security.
Encryption
Encryption is scrambling your message into gibberish so only someone with the secret decoder ring can read it.
PCI DSS (PCI DSS)
PCI DSS is the security standard you must follow if you handle credit card data.
Security Audit
A security audit is a systematic review of your code, infrastructure, and processes to find security weaknesses.
SOC 2 (SOC 2)
SOC 2 is a trust certification for SaaS companies. It proves to enterprise customers that you take security, availability, and privacy seriously.