大家可能已经听说过GDPR的新法律，又称 通用数据保护条例 。该法律由欧盟制定并在2018年5月25日生效。它适用于任何处理欧盟（EU）居民个人信息的组织，无论这个组织在世界的哪个地方。其中，GDPR要求组织维护任何欧盟居民个人信息的隐私和安全。为确保符合GDPR，理解和实施一些关键原则也是必要的。
You may have heard of a new law called GDPR, or the General Data Protection Regulation. This law was developed by the European Union and takes effect 25 May 2018. It applies to any organization that handles the personal information of any resident in the European Union (EU), regardless of where in the world that organization is located. GDPR requires organizations to maintain the privacy and security of any EU resident s personal information. To ensure compliance with GDPR, some key principles need to be understood and implemented.
人们有隐私权。组织需要通过限制他们收集和处理的个人数据并保护这些数据来尊重他们的隐私。隐私义务适用于任何信息，不论是单独使用还是与其他信息一起使用，都可以识别生活在欧盟的个人。这些信息可以是地址，护照号码，驾驶执照号码，财务详情，生物识别信息，工会会员资格，医疗史，位置数据，性别，宗教或政治取向有关的信息。该规定适用于 自然人 ，即有生命的个人。以下是应该遵循的GDPR的一些主要原则：
People have a right to privacy.Organizations need to respect their privacy by restricting what personal data they collect and process and by safeguarding that data. Privacy obligations apply to any information, either by itself or used with other pieces of information, that could identify an individual person living in the European Union. This information could be items such as addresses, passport numbers,driver s license numbers, financial details,biometrics,union memberships,medical history, location data, or information relating to a person s sexual,religious, or political orientation. The regulation applies to a natural person, meaning a living individual. Here are some of the main tenets of GDPR that should be followed:
