DSVGO

Datenschutz-Grundverordnung

The German term for the EU’s General Data Protection Regulation (GDPR). In force since May 25, 2018, it sets strict rules for how organizations collect, process, store, and share personal data. It applies to all EU-based businesses and to non-EU organizations offering goods, services, or monitoring the behavior of EU residents.

The regulation is built on principles such as lawfulness, transparency, purpose limitation, data minimization, and accountability. It grants individuals rights including access to their data, correction, deletion (right to be forgotten), and data portability.

Enforcement is handled by national data protection authorities, with fines of up to €20 million or 4% of global annual turnover for serious violations. For businesses in Germany and across the EU, DSGVO compliance is essential for avoiding penalties and building customer trust.