GDPR (General Data Protection Regulation) – FAQ

This document is a concise GDPR FAQ and guidance piece explaining what constitutes personal data, roles such as data controller/processor and DPO, data subject rights (access, rectification, erasure, portability, objection, etc.), breach notification and response timelines, potential fines, and practical phases for achieving compliance (discovery, governance, protection, reporting). It focuses on compliance planning and governance recommendations rather than technical incident details or threat intelligence.