On May 25, 2018, the General Data Protection Regulation (GDPR) became operational, revolutionizing the methods to protect and manage personal data. GDPR is responsible for safeguarding data and privacy of individuals within the European Union(EU) and the United Kingdom (UK)

Our clients often function as data controllers or data processors, and we serve as a data processor or data sub processor for these clients. While the data processor processes the personal data on behalf of the data controller or, in cases where we are data sub-processors, on the processor’s behalf, the data controller decides the lawful means and purposes of processing the data subject’s personal information.

However, in accordance with GDPR regulations, data controllers are responsible for GDPR compliance. We, as data processors or data sub-processors, consider ourselves to be equally responsible for implementing organisational and data security policies that enable privacy by design and default, demonstrating that data processing is secured and protected at our end, and enabling data controllers or data processors, as applicable, to be fully confident about data privacy and security while sharing their or their client’s data.