You’ve been sent a lot of emails about it… but what is GDPR?
Some high-profile US news websites are temporarily unavailable in Europe after new EU data protection rules came into effect.
The Chicago Tribune and LA Times were among those saying they were currently unavailable in most European countries.
Meanwhile complaints were filed against US tech giants within hours of the General Data Protection Regulation (GDPR) taking effect.
GDPR gives EU citizens more rights over how their information is used.
It is an effort by EU lawmakers to limit tech firms’ powers.
Under the rules, companies working in the EU – or any association or club in the block – must show they have a lawful basis for processing personal data, or face hefty fines.
There are six legal bases for using personal data, including getting express consent from consumers. However, in most cases firms must also show that they need the personal data for a specific purpose.
What is the legal case about?
Facebook, Google, Instagram and WhatsApp are accused of forcing users to consent to targeted advertising to use the services.
If the complaints are upheld, the websites may be forced to change how they operate and they could be fined.
Which sites are unavailable?
News sites within the Tronc and Lee Enterprises media publishing groups were affected.
Tronc’s high-profile sites include the New York Daily News, Chicago Tribune, LA Times, Orlando Sentinel and Baltimore Sun.
Its message read: “Unfortunately, our website is currently unavailable in most European countries. We are engaged on the issue and committed to looking at options that support our full range of digital offerings to the EU market.”
Lee Enterprises publishes 46 daily newspapers across 21 states.
Its statement read: “We’re sorry. This site is temporarily unavailable. We recognise you are attempting to access this website from a country belonging to the European Economic Area (EEA) including the EU which enforces the General Data Protection Regulation (GDPR) and therefore cannot grant you access at this time.”
CNN and the New York Times were among those not affected. The Washington Post and Time were among those requiring EU users to agree to new terms.
What is GDPR?
Lawmakers in Brussels passed the new legislation in April 2016, and the full text of the regulation has been published online.
Misusing or carelessly handling personal information will bring fines of up to 20 million euros ($23.4m; £17.5m), or 4% of a company’s global turnover.pt
All EU citizens now have the right to see what information companies have about them, and to have that information deleted.
Companies must be more active in gaining consent to collect and use data too, in theory spelling an end to simple “I agree with terms and conditions” tick boxes.
Companies must also tell all affected users about any data breach, and tell the overseeing authority within 72 hours.
Each EU member state must set up a supervisory authority, and these authorities will work together across borders to ensure companies comply.