British Private Equity & Venture Capital Association
Guide to GDPR for the Funds Industry
April 2018
What is the GDPR and why is it relevant?
The GDPR, or the General Data Protection Regulation, is a new EU data privacy law that comes into force on 25 May 2018. The GDPR is intended to provide a single harmonised data privacy law that applies across the EU and is appropriate for the use of Personal Data in the 21st century. The GDPR imposes many new data protection requirements on the collection, use and disclosure of Personal Data which will be relevant to firms and imposes significant fines of up to 4% of annual worldwide turnover.
These Chapters describe how key parts of the GDPR will apply to firms and key obligations and issues for firms to consider in dealing with the GDPR.
Contacts

Offices
Capabilities
Related Pages
Suggested News & Insights
Sidley Expands Investment Funds Capabilities With New York Partners Cliff Cone, Michael Sabin, and Dan DrabkinJanuary 20, 2026Fifth Circuit Rejects “Passive Investor” Test for Code Section 1402(a)(13) Limited Partner ExceptionJanuary 16, 2026Sidley Ranked in Chambers Greater China Region 2026January 15, 2026UK Cryptoasset Regulation — Action Points for 2026–27January 13, 2026Sidley Advises Lux Capital on New VC Fund Lux IXJanuary 9, 2026Hong Kong to Further Enhance Licensing Regime for Virtual Assets to Cover Advisors and ManagersJanuary 7, 2026
- Stay Up To DateSubscribe to Sidley Publications
- Follow Sidley on Social MediaSocial Media Directory

