Print

General Data Protection Regulation

Following many years of intense political debate on data protection in the European Union, the General Data Protection Regulation (GDPR) will finally become law across the EU in May 2018 and is designed to be the cornerstone of data protection in Europe. It sets out directly applicable rules on the rights of data subjects, the duties of those organisations that demand the processing of personal data and those that do the processing (data controllers and processors), international data transfers and the powers of supervisory authorities.

Filters

8
Jun
2026

High-Level Debate: “From Omnibus to Opportunity: Driving Data Protection and Innovation”

On 8 June 2026, the EDPS, the BfDI, and the BayLfD are organising a high‑level debate to promote an informed and forward‑looking exchange on the European Commission’s Omnibus proposals and their implications for the GDPR and the broader EU digital regulatory framework, including the Artificial Intelligence Act (AI Act). The event is kindly hosted by the Representation of the Free State of Bavaria to the European Union.

28
Jan
2026

Data Protection Day 2026: Reset or refine?

Data Protection Day (28 January) celebrates the signing of Convention 108, the first legally binding treaty protecting privacy in the digital age. To mark the occasion, the Council of Europe (CoE) and the European Data Protection Supervisor (EDPS) are co-organising a one-day event focused on new frontiers in data protection. The conference will explore the challenges and opportunities that arise when innovation and emerging technologies intersect with privacy risks and the regulatory framework.