Key requirements of GDPR include:
- Obtaining explicit consent for data processing.
- Ensuring data subject rights (e.g., access, rectification, deletion).
- Implementing appropriate technical and organisational measures to protect data.
- Reporting data breaches within 72 hours.