General Data Protection Regulation (GDPR)
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)
- Stage
- In force, reached 4 May 2016
- In force
- In force since 24 May 2016 · CELEX 32016R0679
- Procedure
- Regulation · Ordinary legislative procedure
- Last activity
- 24 May 2016
Delegated and implementing acts beneath it
By status: 9 published, 1 planned.
| Act | Kind | Status | Adoption |
|---|---|---|---|
| Standard contractual clauses for the transfer of data to third country controllers and processors subject to the GDPR | Implementing · Decision | Planned | Q2 2027 |
| Commission Implementing Decision (EU) 2021/914 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2019/419 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2026/179 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2025/2574 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2025/1382 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2025/1226 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2023/1795 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2022/254 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2021/1772 | Implementing · Decision | Published |
Titles link to EUR-Lex where the act has been published.
Documents
Newest first. Each opens at its source.
- Report · A7-0402/2013Parliament
- Report · A8-0139/2016Parliament
- Proposal · COM(2016)0214Commission
- Proposal · COM(2018)0043Commission
- Proposal · COM(2020)0264Commission
- Proposal · COM(2024)0007Commission
- Proposal · COM(2024)0357Commission
- Text adopted · Corrigendum to final act 32016R0679R(02)Commission
- OJ C 192 30.06.2012, p. 0007Commission
- OJ C 301 12.09.2015, p. 0001Commission
- Text adopted · OJ L 119 04.05.2016, p. 0001Commission
- Text adopted · OJ L 127 23.05.2018, p. 0002Commission
- Committee opinion · PE494.710Parliament
- Committee opinion · PE496.497Parliament
- Committee opinion · PE496.562Parliament
ShowHide the other 17 documents
- Committee opinion · PE498.045Parliament
- Report · PE501.927Parliament
- Amendments · PE504.340Parliament
- Amendments · PE506.145Parliament
- Amendments · PE506.146Parliament
- Amendments · PE506.147Parliament
- Amendments · PE506.164Parliament
- Amendments · PE506.166Parliament
- Amendments · PE506.168Parliament
- Amendments · PE506.169Parliament
- Amendments · PE506.170Parliament
- Amendments · PE506.173Parliament
- Report · PE580.501Parliament
- Text adopted · Regulation 2016/0679Commission
- Text adopted · SP(2014)455Parliament
- Text adopted · T7-0212/2014Parliament
- Text adopted · T8-0125/2016Parliament
Summary
GeneratedThe GDPR harmonizes data protection rules across the EU, strengthening individual privacy rights and facilitating free flow of personal data within the internal market. It applies to all organizations processing EU residents' personal data, including tech companies, financial services, healthcare providers, and public authorities.
What the workspace adds on this file
Everything above is the public record. In the workspace, subscribers see this file with their own layer on top.
Why it matters to you
What moved
Your contacts on it
A first draft
Sources: EP Legislative Observatory · EU Law Tracker · EUR-Lex. Record as of 30 Sept 2026. Something wrong on this page? Report an error.
Request access
See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.
Hosted in the EU · Security →
By submitting, you agree to our privacy policy.