Glossary · IT & systems
GDPR
The European rules for processing personal data.
The GDPR (AVG in Dutch, RGPD in French) is the set of European rules for processing personal data. It determines how you may collect, store and use data about customers, employees and suppliers, and what rights those people have in the process.
The core idea is that you handle personal data with care. You collect only what you need, you explain what you use it for, you keep it no longer than necessary and you protect it against misuse. Anyone who asks is entitled to know what data you hold about them.
For an SME this is not a matter of filling in a document once, but a way of working. It pays to know which personal data sits where in your systems, because you need that overview to comply with the rules and to act quickly when an incident occurs.
