General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Its adoption was an essential step to strengthen individuals' fundamental rights in the digital age and facilitate business by clarifying rules for companies and public bodies in the digital single market, reducing fragmentation across national systems and unnecessary administrative burdens. The Regulation entered into force on 24 May 2016 and has applied since 25 May 2018.
Who it applies to
Governs the processing of personal data of natural persons and the free movement of such data; clarifies rules for companies and public bodies operating in the EU digital single market. The GDPR has been incorporated into the EEA Agreement, making it applicable throughout the European Economic Area. National data protection authorities and the European Data Protection Board oversee its consistent application across EU/EEA Member States.