Security Practices for
GDPR Compliance

The GDPR has been incredibly significant globally. Almost everyone who works with digital services has had to factor its ratification into their work, and almost every consumer has been made aware of it. With every EU member state enforcing the privacy rights not only of their own citizens always, but also anyone physically within their borders, even temporarily, then GDPR compliance is mandatory for anyone offering services online.

GDPR is all about giving control to the citizen of how their personal data is collected and used online. Companies need to strongly consider how they store this information, who has access to it, how they track processing of it, and fulfilling requests to delete or transfer this information. Far from a simple checklist, GDPR compliance often requires a rethink of how personal data is handled at every level of processing within a company - whether that be someone's medical or financial data, or the cookie you send them to simply do site analytics.