General Data Protection Regulation for SaaS & Software

GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.

What GDPR means for SaaS & Software

SaaS & Software organisations operating in the EU must comply with GDPR obligations. Below are the key requirements that apply to your sector.

• Maintain records of processing activities (ROPA)
• Conduct Data Protection Impact Assessments
• Appoint a Data Protection Officer (if required)
• Implement data subject rights procedures
• Report breaches within 72 hours

Related Resources