Complying with the EU’s New Data Privacy Law

On May 25, 2018, the European Union (EU)'s General Data Protection Regulation (GDPR) comes into force, broadening the scope of privacy obligations for companies doing business in or with Europe. The GDPR applies to all businesses that collect and use personal information of EU residents, including organizations located outside the EU.

U.S. companies, including Data Processors in the United States, may be subject to the GDPR if they offer products or services to EU residents or if they monitor the behavior of such residents even if they do not have a physical presence in the EU.

The GDPR goes into effect on May 25th. In this ACC Docket article, Lakshmi Sarma Ramani, a member of our Washington D.C.-area team, reviews its applicability to nonprofit organizations.