European Union General Data Protection Regulation (GDPR)

GDPR imposes obligations on entities, like Georgia Tech, that collect or process personal data about people while they are located in the EU. The EU GDPR applies to personal data collected or processed about anyone located in the EU, regardless of whether they are a citizen or permanent resident of an EU country.

Key Protected Data Types:

  • Trade union membership
  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Genetic, biometric data for the purposes of uniquely identifying a natural person
  • Health data
  • Data concerning a person's sex life or sexual orientation

"Individuals with questions about their personal data collected and processed by Georgia Tech that is subject to the EU GDPR should contact Institutional Research & Enterprise Data Management at support@irp.gatech.edu"