Muttii OT resilience leadership is recognised by TAG

Data protection

Rules for the protection of personal data inside and outside the EU.

Overview

Start earning with Muttii

Apply for the Muttii Affiliate Program

Data protection in the EU

In today’s digital age, where information is constantly shared, collected and processed, there is a need for clear and strong data protection rules.
Data protection is a fundamental right under EU law. EU data protection legislation is comprised of the General Data Protection Directive (GDPR), the Law Enforcement Directive (LED), and the Data Protection Regulation for EU institutions, bodies, offices and agencies (EUDPR).
To ensure that this legislation is applied consistently, national and European data protection authorities and bodies have been established.

Data protection: questions and answers

Data protection explained

Read about key concepts such as personal data, data processing, when and to whom the GDPR applies to, and more.

Information for individuals

Read about the rights you have over your personal data under the GDPR, how to exercise these rights, and more.

Information for businesses and organisations

Read about data protection principles and obligations, enforcement of the rules, dealing with individuals' requests, and more.

International dimension of data protection

The EU has established international data protection agreements to ensure that EU citizens’ personal data remains protected even if transferred outside the EU.
EU data protection legislation includes safeguards for when transferring data to third countries, including adequacy decisions, standard contractual clauses (SCC) and binding corporate rules (BCR).

Funding to support the implementation of the GDPR

The Commission has provided funding to national data protection authorities to finance projects that support the implementation of the GDPR.

The types of projects funded by the Commission typically include awareness-raising campaigns, training programs, and the development of practical tools and materials that can facilitate small and medium-sized enterprises’ (SMEs) compliance with the GDPR.

In May 2025, the Commission adopted a Single Market Simplification proposal to cut €300 million in annual administrative cost for companies. In order to respond to calls from Small and Medium Enterprises (SMEs) and Small and Mid-Caps companies (SMCs), the Commission introduced targeted changes to the rules on record-keeping for small and medium-sized companies and organisations under 750 employees. They include namely:

  • Extending the derogation from record-keeping obligation under Article 30(5) of the GDPR to SMCs and organisations under 750 employees.
  • Requiring SMEs, SMCs and organisations with fewer than 750 employees to maintain records only when their processing of personal data can be considered “high risk” under the GDPR.
    The proposal ensures to maintain robust standards of data protection and respects the GDPR risk-based approach. It does not affect the rest of the provisions of the GDPR

New Customer

New to Muttii? Create an account to get started today.

Registered Users

Have an account? Sign in now.