general data protection regulation on blue

data protection regulation gdpr compliance privacy personal information security consent rights breach penalty fine processing controller processor transfer safeguard access erasure rectification restriction notification subject transparency accountability lawful basis legitimate interest sensitive anonymization pseudonymization encryption retention policy impact assessment authority supervisory crossborder cooperation directive member state international profiling automated decisionmaking organization measures certification code conduct reporting training awareness thirdparty agreement legal framework notice