EU General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR) imposes obligations on organizations that process (acquire, use, store) information collected from or about individuals located in the European Union (and Iceland, Norway and Liechtenstein). If you are contemplating a new contract with a vendor that will process personal data, please contact one of the following individuals in the Office of the General Counsel, or any of the following contract analysts in Strategic Procurement, for assistance with this issue.

OGC                                                                                           Strategic Procurement