The EU General Data Protection Regulation (GDPR) came into force on 25 May 2018 and brought forward the most significant changes to data protection law across the European Union. Based on privacy by design and taking a risk-based approach, the GDPR has been designed to meet the requirements of the digital age.

EPTDA is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. The association has always had a robust and effective data protection program in place, which complies with existing law and abides by the data protection principles.

However, it was recognized as a mandatory obligation in updating and expanding this program to meet the demands of the GDPR and European legislation.

The following has been secured to follow GDPR requirements

EPTDA documented its entire process of collecting any member data follows the regulations and requirements of GDPR policy.

EPTDA contacted all their third party service providers to formally disclaim that they too are complying with all GDPR regulations within their own business.

EPTDA reviewed all its databases and contact mailing lists, and asked for a formal consent from all its member company representatives. This consent was granted.

EPTDA reviewed and updated its Privacy and Cookies Policy and updated its website content accordingly.