EU General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR) imposes obligations on organizations that process (acquire, use, store) information collected from or about individuals located in the European Union (and Iceland, Norway and Liechtenstein). If you are contemplating a new contract with a vendor that will process personal data, please contact one of the following individuals in the Office of the General Counsel, or any of the following contract analysts in Strategic Procurement, for assistance with this issue.

OGC                                                                                           Strategic Procurement

diane_lopez@harvard.edu                                                         elizabeth_copeland@harvard.edu

ranna_farzan@harvard.edu                                                       erika_sheldon@harvard.edu

                                                                                                   robert_ditzion@harvard.edu