diff --git a/fundamentals/overview.mdx b/fundamentals/overview.mdx
index 4e4be0416..88c5d52c0 100644
--- a/fundamentals/overview.mdx
+++ b/fundamentals/overview.mdx
@@ -54,11 +54,11 @@ Fully customizable and easy to use? Yes, it's possible, with our SDKs and APIs f
 
 Choosing CometChat is your assurance of a meticulously vetted and highly secure solution. We deeply appreciate and obsess over the significance of both security and compliance.
 
-CometChat is fully compliant with the following security standards:
+CometChat is fully compliant with the following security and privacy standards:
 
 * **HIPAA + BAA**: CometChat is compliant with HIPAA rules and standards and can enter into a BAA.
 * **PIPEDA**: CometChat is compliant with PIPEDA and follows the Fair Information Principles.
-* **GDPR**: CometChat meets all requirements of GDPR and provides special APIs to enable customers to maintain compliance.
+* **GDPR**: CometChat meets all the requirements of GDPR. To service data subject requests, our REST APIs let you [retrieve a user's data](/rest-api/users/get) on request, and separately [permanently delete a user](/rest-api/users/delete#body-permanent) along with all their messages and conversations.
 * **ISO 27001**: CometChat is certified compliant with the ISO 27001 standards.
 * **SOC 2 Type 2**: CometChat is certified compliant with SOC 2’s five Trust Service Principles of security, availability, privacy, confidentiality, and processing integrity.
 
@@ -97,8 +97,8 @@ CometChat is fully compliant with the following security standards:
 | Kick/ban users               | Data export                       | App creation API        |
 | Report message               | ISO 27001                         | Presence webhook        |
 | Virus & malware scanner      | SOC 2                             | Read receipt            |
-| Sentiment analysis           | GDPR API                          | Delivery receipt        |
-|                              | HIPPA w/ BAA                      |                         |
+| Sentiment analysis           | GDPR                              | Delivery receipt        |
+|                              | HIPAA w/ BAA                      |                         |
 |                              | Encryption in transit (TLS/SSL)   |                         |
 |                              | Encryption at rest (AES 256)      |                         |
 |                              | Role-based access control         |                         |