What is the GDPR? The General Data Protection Regulation (GDPR) replaced existing data protection laws, and came into effect on 25th May 2018. It strengthens data protection within the European Union and makes it easier for you, the Data subject, to access your personal data and control how it is used. What are some of the key changes? The GDPR sets out your privacy rights, which include: The right to access personal information an organisation holds on you The right to obtain copies of personal data an organisation holds The right to have inaccuracies corrected The right to have information erased The right to object The GDPR states that your personal data will be: Processed lawfully, fairly and in a transparent way Collected for specific, explicit and legitimate purposes and not further processed in a manner that is incompatible with the purposes set out in the section below Accurate, and where necessary, kept up to date Kept in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data is processed Why do State Savings collect my personal data? To process your Application to buy State Savings Products To help in the administration of your holdings To meet legal and regulatory obligations How secure and confidential is my personal data? In accordance with the GDPR, we will process your personal data in a manner that ensures appropriate security of your Data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. For further information please contact: The Data Protection Officer, State Savings, National Treasury Management Agency, Treasury Dock, North Wall Quay, Dublin 1, D01 A9T8.