General Data Protection Regulation (GDPR) imposes obligations on organizations that process (acquire, use, store) information collected from or about individuals located in the European Union (and Iceland, Norway and Liechtenstein). If you are contemplating a new contract with a vendor that will process personal data, please contact one of the following individuals in the Office of the General Counsel, or any of the following contract analysts in Strategic Procurement, for assistance with this issue.
OGC Strategic Procurement
julie_faber@harvard.edu elizabeth_copeland@harvard.edu
william_meyer@harvard.edu erika_sheldon@harvard.edu