GDPR: Brexit Implications on UK, EEA & Third Countries
The EU General Data Protection Regulation (GDPR) controls how organizations collect, use and store personal data. It applies to both businesses based in the European Economic Area (EEA) and to those with no physical establishment in the EU, but with operations that fall into the extraterritorial scope of the GDPR. Fines for GDPR violations can reach €20m or 4% of the annual worldwide turnover (whichever is higher).