General Data Protection Regulation

On December 17, 2015, the European Parliament and Council of the European Union reached an informal agreement on the final draft of the EU General Data Protection Regulation (“GDPR”).

The GDPR has finally been adopted on April 14, 2016, after four years of drafting and negotiations. The GDPR is now officially EU law and will directly apply in all EU countries, replacing EU and national data protection legislation.

Once officially adopted by the European Parliament and the Council of the European Union, the GDPR will apply in EU Member States after a period of two years.