GDPR, PDPA, and Your Nonprofit: What Data Protection Law Actually Requires You to Do
Whether you're subject to GDPR, PDPA, or both, the obligations for nonprofits that handle personal data are real — and most small charities are not meeting them. Here's what the law actually says, what the practical requirements look like, and where to start.