GDPR ek data privacy aur protection law hai jo European Union ne banaya hai. Iska purpose hai logon ke personal data ko misuse hone se bachana aur companies ko data responsibly handle karne ke liye legally bound karna.
Implemented on: 25 May 2018
Applies to: Sabhi organizations jo EU citizens ka personal data collect/process karti hain.
Koi bhi information jo kisi person ko directly ya indirectly identify kare:
• Name
• Email
• Phone number
• IP address
• Location data
• ID numbers
• Financial details
• Medical records
• Photos / biometric data
• Online cookies
✔️ Individuals ko data par control dena
✔️ Data misuse aur identity theft rokna
✔️ Privacy ko fundamental right banana
✔️ Digital business me transparency lana
1️⃣ Lawfulness, Fairness & Transparency
Data legal aur transparent tareeke se collect hona chahiye.
2️⃣ Purpose Limitation
Data sirf specific purpose ke liye use hoga.
3️⃣ Data Minimization
Sirf zaroori data hi collect kiya jayega.
4️⃣ Accuracy
Data accurate aur up-to-date hona chahiye.
5️⃣ Storage Limitation
Data ko zaroorat se zyada time tak store nahi kar sakte.
6️⃣ Integrity & Confidentiality
Data properly secure hona chahiye.
7️⃣ Accountability
Organization ko prove karna hoga ki wo GDPR follow kar rahi hai.
👤 Right to Access – Apna data dekh sakte hain
✏️ Right to Rectification – Galat data sahi kar sakte hain
❌ Right to Erasure – Data delete karwa sakte hain
⛔ Right to Restrict Processing
📦 Right to Data Portability
🚫 Right to Object marketing/profiling ke against
🤖 Rights Against Automated Decisions
✅ Privacy policy clear honi chahiye
✅ User se proper consent lena zaroori
✅ Data breach 72 hours me report karna
✅ Secure storage (encryption, firewalls)
✅ Third-party vendors compliant hone chahiye
✅ Cookies ke liye consent lena
✅ Data Protection Officer appoint karna (large firms)
Consent hona chahiye:
✔️ Freely given
✔️ Specific
✔️ Informed
✔️ Clear
✔️ Withdraw karna easy ho
Join our community of students around the world helping you succeed.
© 2025 Skillup Zone. All rights reserved.