British Private Equity & Venture Capital Association
Guide to GDPR for the Funds Industry
April 2018
What is the GDPR and why is it relevant?
The GDPR, or the General Data Protection Regulation, is a new EU data privacy law that comes into force on 25 May 2018. The GDPR is intended to provide a single harmonised data privacy law that applies across the EU and is appropriate for the use of Personal Data in the 21st century. The GDPR imposes many new data protection requirements on the collection, use and disclosure of Personal Data which will be relevant to firms and imposes significant fines of up to 4% of annual worldwide turnover.
These Chapters describe how key parts of the GDPR will apply to firms and key obligations and issues for firms to consider in dealing with the GDPR.
Contacts

Offices
Capabilities
Related Pages
Suggested News & Insights
Out With the New, In With the Old: The “Five-Part Test” Rides AgainMarch 30, 2026U.S. CFTC, SEC Enter Into Historic Memorandum of Understanding, Joint Harmonization Initiative to Enhance Regulatory CoordinationMarch 27, 2026Sidley Represents Bonaccord Capital in Minority Investment in Prime FinanceMarch 26, 2026Private Equity Investment in U.S. Law Firms (Part II): Deal Architecture, Regulatory Boundaries, and the Lender PlaybookMarch 25, 2026SEC Releases Landmark Interpretation on Application of U.S. Securities Laws to Crypto Assets, in Coordination With CFTCMarch 24, 2026Sidley Advises on the Upsized US$966 Million IPO of Janus LivingMarch 23, 2026
- Stay Up To DateSubscribe to Sidley Publications
- Follow Sidley on Social MediaSocial Media Directory

