The Data Protection Regulation is mainly about:

  • How and when personal data may be handled
  • What requirements are placed on the person responsible for personal data (“Personal data controller”)
  • What requirements are placed on the person who handles personal data on behalf of another (“Personal data processor”)