1.1 What is the General Data Protection Regulation (GDPR)?

The GDPR rules apply to the processing of personal data. The GDPR ensures the modernization of privacy legislation, creates a uniform European legislative framework and gives citizens / stakeholders more control on how their personal data is processed. The AVG requires that organizations are transparent and responsible to citizens / stakeholders about how and why they process personal data.

The GDPR provides that Member States can draft national legislation in certain areas. In Belgium there is a framework that applies when you want to deviate from the rights of those involved (see 2.9).

Altough the rules of the GDPR and the framework legislation are not dependent on the institution, certain processes are insititution-specific. This is made clear visually in the text.