Compliance guidance
GDPR for Small Business
Quick answer
The GDPR can apply when an organisation processes personal data connected to people in the European Economic Area. Applicability and duties depend on the role, processing, location, and circumstances.
Who this is for: Businesses handling personal data connected to the EEA, including some businesses outside Europe.
What to do
- 01Identify what personal data you collect and why.
- 02Record where it is stored, who can access it, and which providers process it.
- 03Review access, retention, incident response, and requests from individuals.
- 04Check the official text and get qualified advice for your circumstances.
What this does not cover
This overview does not determine whether GDPR applies to your business, identify every lawful basis, or replace legal advice.
This page is educational information, not legal advice or a professional security audit. Check the official requirements and get qualified help when your circumstances require it.
See how this applies to your businessContinue exploring