The EU General Data Protection Regulation
After over four years of discussion, the new EU data protection framework was adopted on 8 April 2016. It takes the form of a Regulation – the General Data Protection Regulation (GDPR).
When the EU General Data Protection Regulation (GDPR) was finally agreed in April 2016, it seemed a long time until it would apply. Many companies are finding that there was a lot (for some, too much) to do.
The GDPR took effect across all Member States from 25 May 2018, replacing the 1995 EU Data Protection Directive. The GDPR is an ambitious piece of legislation which took over four years to agree. One of the key aims was to create a harmonised approach to data protection across the EU, with bolstered rights for individuals in this age of rapid technological advances.
The GDPR sets a high standard for personal data protection throughout the EU, imposes a raft of new (sometimes onerous) obligations on those handling the data, and also provides for a much more punitive enforcement regime.
For our detailed GDPR guide, please click here.
GDPR Podcast
Key lessons to learn from recent data protection enforcement actions
Related links
A&O Data Hub
Focusing on the latest digital trends and risks and developments in the field of data protection, privacy, information and cyber law.
Read moreData protection post-brexit
Data protection post-brexit: What to expect and how to prepare.
Read moreGDPR for Litigators
The EU GDPR has become ubiquitous. Less understood is what GDPR means for disputes and contentious regulatory/enforcement matters.
Read moreRelated brochures
Preparing for GDPR compliance
The General Data Protection Regulation is transforming privacy and data protection in the European Union.
Preparing for the General Data Protection Regulation
UK employer challenges: EU Data protection shake-up
In focus: EU proposed data protection regulation.
