--- title: GDPR - SaaS reconsiders on-premises software | daily.dev description: With GDPR's May 25, 2018 enforcement date approaching, SaaS vendors targeting EU users face costly new requirements around data collection, breach... canonical: https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GDPR - SaaS reconsiders on-premises software | daily.dev og:description: With GDPR's May 25, 2018 enforcement date approaching, SaaS vendors targeting EU users face costly new requirements around data collection, breach... og:url: https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2 og:image: https://api.daily.dev/og/posts/mmiyvKKC2.png og:image:alt: GDPR - SaaS reconsiders on-premises software og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GDPR - SaaS reconsiders on-premises software **[Teleport](https://daily.dev/sources/teleport)** · 11 min read · 0 upvotes · 0 comments ## Summary With GDPR's May 25, 2018 enforcement date approaching, SaaS vendors targeting EU users face costly new requirements around data collection, breach notification, right to access, data portability, and the right to be forgotten. Fines can reach 4% of global turnover or €20M. The piece argues these compliance costs may narrow the cost gap between multi-tenant hosted SaaS and single-tenant on-premises (or private cloud) deployments, making on-prem offerings more economically viable. It cites a satirical 'nightmare letter' example of a GDPR subject access request to illustrate the operational burden, and closes by promoting the author's company's Gravity product for helping vendors deploy on-prem. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What are the maximum fines for GDPR non-compliance? Fines can reach up to 4% of a company's global annual turnover (revenue) or €20 million, whichever amount is greater. This applies to any company processing personal data of EU residents, regardless of where the company or its data processing is located, making territorial scope broader than under the prior Data Protection Directive. _Teams weighing compliance risk track regulatory shifts like GDPR enforcement on daily.dev._ ### How quickly must a company notify authorities after a data breach under GDPR? Notification is mandatory within 72 hours of a provider first becoming aware of a breach, in any case where the breach is likely to result in a risk to individuals' rights and freedoms. This applies across all EU member states and is one of several new obligations, alongside right to access, right to be forgotten, and data portability requirements. _Engineers building breach-response workflows follow compliance deadlines like this on daily.dev._ ## Similar posts on daily.dev - [GDPR at 10: Landmark data protections, increasing business burden](https://daily.dev/posts/gdpr-at-10-landmark-data-protections-increasing-business-burden-to7351dce) · CSO Online · 0 upvotes · 0 comments - [Compliance in a Multi-Cloud, Multi-Regulation World](https://daily.dev/posts/compliance-in-a-multi-cloud-multi-regulation-world-k3f4hilbq) · Security Boulevard · 0 upvotes · 0 comments - [GDPR and HIPAA Data Compliance Tooling: The 9 Capabilities Each Requires](https://daily.dev/posts/gdpr-and-hipaa-data-compliance-tooling-the-9-capabilities-each-requires-yplqktmgt) · Decube · 0 upvotes · 0 comments - [Data Protection by Design: GDPR Principles and Implementation](https://daily.dev/posts/data-protection-by-design-gdpr-principles-and-implementation-xihbgsiil) · Syncfusion · 0 upvotes · 0 comments - [Europe’s GDPR cops dished out €1.2B in fines last year](https://daily.dev/posts/europe-s-gdpr-cops-dished-out-1-2b-in-fines-last-year-kbed4rlbx) · The Register · 1 upvotes · 0 comments --- Tags: [#data-privacy](https://daily.dev/tags/data-privacy), [#compliance](https://daily.dev/tags/compliance), [#gdpr](https://daily.dev/tags/gdpr) [View this post on daily.dev](https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GDPR - SaaS reconsiders on-premises software","url":"https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2"},"datePublished":"2026-08-23T12:23:27.954Z","dateModified":"2026-08-23T12:54:39.830Z","description":"With GDPR's May 25, 2018 enforcement date approaching, SaaS vendors targeting EU users face costly new requirements around data collection, breach...","image":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","thumbnailUrl":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"data-privacy,compliance,gdpr","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"GDPR - SaaS reconsiders on-premises software"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/gdpr---saas-reconsiders-on-premises-software-mmiyvkkc2#faq","mainEntity":[{"@type":"Question","name":"What are the maximum fines for GDPR non-compliance?","acceptedAnswer":{"@type":"Answer","text":"Fines can reach up to 4% of a company's global annual turnover (revenue) or €20 million, whichever amount is greater. This applies to any company processing personal data of EU residents, regardless of where the company or its data processing is located, making territorial scope broader than under the prior Data Protection Directive. Teams weighing compliance risk track regulatory shifts like GDPR enforcement on daily.dev."}},{"@type":"Question","name":"How quickly must a company notify authorities after a data breach under GDPR?","acceptedAnswer":{"@type":"Answer","text":"Notification is mandatory within 72 hours of a provider first becoming aware of a breach, in any case where the breach is likely to result in a risk to individuals' rights and freedoms. This applies across all EU member states and is one of several new obligations, alongside right to access, right to be forgotten, and data portability requirements. Engineers building breach-response workflows follow compliance deadlines like this on daily.dev."}}]} ```