{"id":41632,"date":"2025-09-25T01:48:02","date_gmt":"2025-09-24T23:48:02","guid":{"rendered":"https:\/\/2b-advice.com\/glossary\/dsgvo\/"},"modified":"2025-09-25T19:55:55","modified_gmt":"2025-09-25T17:55:55","slug":"dsgvo","status":"publish","type":"glossary","link":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/","title":{"rendered":"GDPR"},"content":{"rendered":"<h1>GDPR (General Data Protection Regulation)<\/h1>\n<h2>Definition<\/h2>\n<p>The General Data Protection Regulation (GDPR) is a European law that has been directly applicable in all member states since May 25, 2018. Its aim is to protect the fundamental rights of natural persons when handling personal data and at the same time to enable the free movement of data within the Union. It defines comprehensive requirements for lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability. The regulation affects all organizations - including those outside the EU - that process the data of EU citizens. The GDPR is of central importance for AI governance, as it sets out the legal framework within which AI systems may use personal data. Violations can result in severe fines.<\/p>\n<h2>Basic principles<\/h2>\n<ul>\n<li><strong>Legality, fairness, transparency:<\/strong> Data may only be processed on a legitimate basis and data subjects must know how their data is being used.<\/li>\n<li><strong>Earmarking and minimization:<\/strong> Only data that is required for a specific purpose may be recorded and this purpose may not be changed subsequently.<\/li>\n<li><strong>Correctness and memory limitation:<\/strong> Data must be correct and will only be stored for as long as necessary.<\/li>\n<li><strong>Integrity and confidentiality:<\/strong> Technical and organizational measures must be taken to protect data from unauthorized access.<\/li>\n<li><strong>Accountability:<\/strong> Those responsible must be able to prove that they comply with these principles.<\/li>\n<\/ul>\n<h2>Practical example<\/h2>\n<p>An online store requires the address of a customer in order to deliver an order. This processing is necessary for the performance of the contract and is therefore permitted. If the store wishes to use the email address later for advertising messages, the GDPR requires clear consent. A double opt-in procedure ensures that only registered recipients are contacted.<\/p>\n<h2>Significance for AI<\/h2>\n<ul>\n<li>AI systems that process personal data must have a legal basis and safeguard the rights of data subjects.<\/li>\n<li>Privacy by design and privacy by default apply during the development and use of AI applications.<\/li>\n<li>In the event of a high risk, a data protection impact assessment (DPIA) must be carried out and documented.<\/li>\n<\/ul>\n<h2>Steps towards compliance<\/h2>\n<ul>\n<li><strong>Data inventory and legal basis:<\/strong> Record all data processing and document purposes and authorization.<\/li>\n<li><strong>Transparent communication:<\/strong> Update data protection notices and enable the revocation of consent.<\/li>\n<li><strong>Implement data subject rights:<\/strong> Define processes for access, rectification, erasure and data portability.<\/li>\n<li><strong>Security:<\/strong> Implement technical measures such as encryption, access restrictions and regular updates.<\/li>\n<li><strong>Continuous monitoring:<\/strong> Carry out regular assessments, document processes and update measures.<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>The GDPR is an EU regulation that governs the protection of personal data, sets out key data protection principles and imposes strict obligations on companies. It is a foundation of AI governance.<\/p>","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"footnotes":""},"class_list":["post-41632","glossary","type-glossary","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>DSGVO - Ailance<\/title>\n<meta name=\"description\" content=\"DSGVO: EU-Verordnung zum Schutz personenbezogener Daten. Grunds\u00e4tze, Betroffenenrechte, Pflichten f\u00fcr Unternehmen und Bu\u00dfgelder kompakt erkl\u00e4rt\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DSGVO - Ailance\" \/>\n<meta property=\"og:description\" content=\"DSGVO: EU-Verordnung zum Schutz personenbezogener Daten. Grunds\u00e4tze, Betroffenenrechte, Pflichten f\u00fcr Unternehmen und Bu\u00dfgelder kompakt erkl\u00e4rt\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-25T17:55:55+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/glossary\\\/dsgvo\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/glossary\\\/dsgvo\\\/\",\"name\":\"DSGVO - Ailance\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"datePublished\":\"2025-09-24T23:48:02+00:00\",\"dateModified\":\"2025-09-25T17:55:55+00:00\",\"description\":\"DSGVO: EU-Verordnung zum Schutz personenbezogener Daten. Grunds\u00e4tze, Betroffenenrechte, Pflichten f\u00fcr Unternehmen und Bu\u00dfgelder kompakt erkl\u00e4rt\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/glossary\\\/dsgvo\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/glossary\\\/dsgvo\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/glossary\\\/dsgvo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DSGVO\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR - Ailance","description":"GDPR: EU regulation on the protection of personal data. Principles, rights of data subjects, obligations for companies and fines explained in compact form","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/","og_locale":"en_US","og_type":"article","og_title":"DSGVO - Ailance","og_description":"DSGVO: EU-Verordnung zum Schutz personenbezogener Daten. Grunds\u00e4tze, Betroffenenrechte, Pflichten f\u00fcr Unternehmen und Bu\u00dfgelder kompakt erkl\u00e4rt","og_url":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/","og_site_name":"Ailance","article_modified_time":"2025-09-25T17:55:55+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/","url":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/","name":"GDPR - Ailance","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"datePublished":"2025-09-24T23:48:02+00:00","dateModified":"2025-09-25T17:55:55+00:00","description":"GDPR: EU regulation on the protection of personal data. Principles, rights of data subjects, obligations for companies and fines explained in compact form","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/glossary\/dsgvo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"DSGVO"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]}]}},"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/glossary\/41632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/glossary"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/glossary\/41632\/revisions"}],"predecessor-version":[{"id":41919,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/glossary\/41632\/revisions\/41919"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=41632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}