General Data Protection Regulation (GDPR)
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)
- Stage
- In force
- In force
- In force since 24 May 2016 · CELEX 32016R0679
- Procedure
- Regulation
- Last activity
- 27 Apr 2016
Delegated and implementing acts beneath it
By status: 2 published, 1 planned.
| Act | Kind | Status | Adoption |
|---|---|---|---|
| Standard contractual clauses for the transfer of data to third country controllers and processors subject to the GDPR | Implementing · Decision | Planned | Q2 2027 |
| Commission Implementing Decision (EU) 2021/914 | Implementing · Decision | Published | |
| Commission Implementing Decision (EU) 2019/419 | Implementing · Decision | Published |
Titles link to EUR-Lex where the act has been published.
Summary
GeneratedThe GDPR harmonizes data protection rules across the EU, strengthening individual privacy rights and facilitating free flow of personal data within the internal market. It applies to all organizations processing EU residents' personal data, including tech companies, financial services, healthcare providers, and public authorities.
What the workspace adds on this file
Everything above is the public record. Subscribers see this page with their own layer on top.
Why it matters to you
What moved
Your contacts on it
A first draft
Sources: EUR-Lex. Record as of 14 Sept 2026. Something wrong on this page? Report an error.
Request access
See this file with your own layer on top: why it matters to you, your contacts on it and a first draft. We’ll schedule a 20-minute walkthrough.
EU-hosted · GDPR-compliant · Trust Center →
By submitting, you agree to our privacy policy.