GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
Published by European Parliament and Council of the European Union · Regulation (EU) 2016/679 — applicable from 25 May 2018
Protection of natural persons with regard to the processing of personal data, and rules on the free movement of personal data within the EU.
How it’s structured
- 11 chapters and 99 articles
- Extraterritorial scope (Article 3): applies to controllers and processors outside the EU that offer goods or services to, or monitor, individuals in the EU
Who it applies to
Controllers and processors of personal data — no size or revenue threshold; the regulation applies regardless of organizational size.
How Pentforge uses it in an engagement
- Gap analysis and evidence preparation designed for GDPR themes — preparation support, not legal advice and not a certification
- Data-flow and processing-activity review mapped to the articles in scope for the engagement
What you get
- A gap register mapped to the relevant GDPR articles
- An evidence pack organized for a data-protection audit or customer questionnaire
Official source
Pentforge does not issue certificates
We assess against GDPR — that is a statement about the work, not a certification. Pentforge holds no certifications of its own; the credentials our practitioners hold individually are listed on About.
Request a scoping call