Individuals Institutional

Call toll-free 800.328.1267

GDPR: A New Era in Data Protection

On May 25, 2018, a new comprehensive European Union (“EU”) privacy law, the General Data Protection Regulation (GDPR), takes effect. The GDPR imposes new rules on companies, government agencies, non-profits, and other organizations (collectively “organizations”) that processes and/or hold Personal Data of data subjects that are citizens of or are residing in the EU. The GDPR applies to organizations established in the EU, as well as organizations based outside of the EU that offer goods or services to, or that monitor behavior of EU data subjects.

Personal Data is any information relating to an identified or identifiable natural person (referred to as a “data subject”). Personal Data can identify the individual directly or indirectly (e.g. in combination with other information), so could include name, identification number, online identifier, location data, or other factors specific to the physical, genetic, mental, economic, cultural or social identity of the person.

TradeStation’s Commitment to Data Protection

TradeStation is committed to maintaining the confidentiality, integrity and security of the Personal Data of our consumers, customers and end users.

EU Data Subjects Have the Following Rights:

  • Request access to your Personal Data
  • Request correction of your Personal Data
  • Request erasure of your Personal Data (subject to regulatory requirements)
  • Request restriction of processing of your Personal Data
  • Request transfer (exporting) of your Personal Data
  • Object to the processing of your Personal Data
  • Right to withdraw consent at any time of the processing of your Personal Data


I am an EU resident or citizen. How do I exercise my rights as a data subject under the GDPR?

Please refer to the Privacy Notice for more details on your enumerated rights, and information on how to exercise those rights.

I am not an EU resident or citizen. What are my data protection rights?

While EU residents or citizens have specific enumerated rights pursuant the GDPR, we apply the same data security standards for all our consumers, customers and end users. Please refer to the Privacy Notice for current data protection rights for persons who are not EU residents or citizens.

I’m a U.S. citizen living in Europe. Does GDPR apply to me?

As a resident of the EU, you are covered by GDPR.

How does TradeStation handle cookies?

Please see the Cookies Policy to learn more.

Where can I find the Privacy Notice?

To read TradeStation’s Privacy Notice, click here.

What happens if there is a security incident involving my Personal Data?

We have put in place procedures to deal with any suspected incidents involving Personal Data and will notify you and any applicable regulators or self-regulatory organizations of an incident that has resulted in a breach of Personal Data where we are legally required to do so.

How do I register a complaint as an EU resident or citizen?
You have the right to make a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of Personal Data relating to you infringes upon your right to data protection and privacy. Alternatively, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (

We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact Client Services in the first instance. You also may contact our designated Data Protection Officer with regard to all issues related to our processing of Personal Data and to exercise your rights under the GDPR at