Implementation of the general regulation on data protection– In the intermunicipal community of Douro, Portugal

The General Data Protection Regulation (GDPR) is a European Union law that came into force in May 2018 and aims to ensure the protection of EU citizens’ personal data. The GDPR sets out a number of obligations for organiza tions processing personal data, including obtaining data subjects’ explicit consent to process their data, ensuring that data is only used for specific purposes and implementing appropriate security measures to protect data. The regulation also gives data subjects the right to request access to, correct or delete their personal data, as well as the right to object to the processing of their data and data porta bility. The GDPR applies to all organizations that process personal data of EU citizens, regardless of their location, and has significant global reach, affecting businesses around the world that handle personal data of individuals in the EU. In this context, this study focused more specifically on the area covered by the Intermunicipal Community of Douro (CimDouro) in order to assess the state of implementation of the GDPR in Local Public Administration, particularly in the municipalities that constitute this Cim.