Overview

General Data Protection Regulation (GDPR) is a European legislation that requires certain protection requirements and provides certain rights to EU citizens. Some of the rights include the right to be forgotten, the right to know how your data is used, and that the data has to be kept with the EU so that the regulations cannot be avoided.

Why are they asking this?

If the organization is based in the EU, they have business units there or they do business there, then they are subject to the GDPR regulations. If they are subject to GDPR regulations then they have to ensure that their partners also follow GDPR so that they do not violate the regulations by using your organization

What do they expect?

It is expected that your organization follows GDPR and implements proper data protection and the right to be forgotten.