BoardEx is committed to protecting, processing and maintaining personal data in accordance with applicable data and privacy laws such as the General Data Protection Regulation (GDPR). We have worked diligently to bring our offerings in line with the relevant requirements of the GDPR, closely following the advice and recommendations received from our UK-based privacy counsel.   BoardEx does collect and process PII (Personally Identifiable Information) on people including EU citizens and residents. This means BoardEx is subject to GDPR. PII is any information that identifies an individual so this could include names, address or even company and job title.   In order to process this information, we need a lawful basis. BoardEx’s Lawful Basis is Legitimate Interest (read more) which means we need the information in order to provide our Services and we have conducted a Legitimate Interest Assessment (LIA) with outside counsel to determine that our use of this data does not infringe on data subjects rights.  Using this lawful basis means there is an additional duty of care on BoardEx to ensure this data is used, stored and processed in the correct way and BoardEx has implemented a number of technical and organisational measures to ensure this.