General Data Protection Regulation

Following many years of intense political debate on data protection in the European Union, the General Data Protection Regulation (GDPR) will finally become law across the EU in May 2018 and is designed to be the cornerstone of data protection in Europe. It sets out directly applicable rules on the rights of data subjects, the duties of those organisations that demand the processing of personal data and those that do the processing (data controllers and processors), international data transfers and the powers of supervisory authorities.