The General Data Protection Regulation is a European regulation that harmonizes the rules applicable to the processing of personal data in the European Union.
It applies to any organization, public or private, that processes personal data on its own behalf or on behalf of a third party, provided that:
- it is established on the territory of the Union; or
- its activity directly targets European residents.
Its official title is Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. This text includes the corrigendum published in the OJEU of 23 May 2018.
The regulation entered into force on 24 May 2016 and applies since 25 May 2018. More information for companies and individuals.
Information about the incorporation of the General Data Protection Regulation (GDPR) into the EEA Agreement.
EU Member States notifications to the European Commission under the GDPR
