General Data Protection Regulation for Fintech & Financial Services

GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.

What GDPR means for Fintech & Financial Services

Fintech & Financial Services organisations operating in the EU must comply with GDPR obligations. Below are the key requirements that apply to your sector.

• Maintain records of processing activities (ROPA)
• Conduct Data Protection Impact Assessments
• Appoint a Data Protection Officer (if required)
• Implement data subject rights procedures
• Report breaches within 72 hours

Related Resources