Regulations library · European Union
GDPR
General Data Protection Regulation (EU) 2016/679
In force European Union privacy consumer rights transfers breach notification
The global reference point for privacy law: lawful bases, principles, rights, accountability, breach notice within 72 hours, transfer rules and fines up to 4 percent of worldwide turnover.
At a glance
- Who it applies to
- Organizations established in the EU, and organizations outside it that offer goods or services to people in the EU or monitor their behavior.
- Who enforces it
- National data protection authorities, coordinated by the European Data Protection Board
- When
- In effect since 25 May 2018.
A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Sources
- Regulation (EU) 2016/679 EUR-Lex · Official text or regulator
Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.