Free Trial Request A Demo
The General Data Protection Regulation (GDPR) is one of the biggest legislative changes made since 1975. To be effective from May 25, 2018, the primary goal of these changes is protection of personal data and rights of EU residents.
We are fully committed to upholding the privacy and rights of our customers and their customers. The essence of the GDPR is in direct alignment with our core values of customer trust and data privacy. With that in mind, we are actively working toward defining our roadmap for GDPR to overhaul our systems and processes in accordance with the standards. We are committed to achieving GDPR compliance well before the May 25, 2018 deadline.
Over the last couple of months, we have made steady progress toward understanding and analyzing how GDPR will impact our customers. This was made possible with the help of a focused group comprising experts on Corporate Security and Compliance and members from our senior leadership. Here’s a glimpse of our analysis and the steps we are taking to ensure compliance:
We take utmost care to ensure that our customer data is secure and easily accessible. While we are constantly working toward enhancing our security parameters under the GDPR guidelines, VWO includes the following out-of-the-box capabilities geared toward protecting personal data and privacy:
As we evaluate further changes that we need to incorporate into our product, we will also be improving the above capabilities to provide easier and more flexible ways of anonymizing the content collected by VWO and to help our customers become GDPR-compliant. We will be updating this page early next year with a roadmap of our changes and how you can leverage these to become GDPR-compliant.
The GDPR was approved and adopted by the EU Parliament in April 2016. The regulation will take effect after a two-year transition period and, unlike a Directive, it does not require any enabling legislation to be passed by the government; meaning it will be effective from May 25, 2018.
The GDPR applies not only to organizations located within the EU but also to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of EU data subjects. It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the location of the companies.
A controller is an entity that determines the purposes, conditions, and means of the processing of personal data, while a processor is an entity that processes personal data on behalf of the controller.
You can refer to the following links for more information on the GDPR and how you can prepare for it.
Last updated: Dec 21, 2017