For U.S. benefit plan administrators, the European Union’s General Data Privacy Regulation is daunting because of its scope and vagueness. Obligations could be triggered not only if a plan covers a European resident but, if applied literally, if information is processed while a U.S. participant is travelling in the EU.
Source: New feed 2