The EU Data Protection Regulation was finally adopted on 14 April 2016, following four years of negotiation. The Regulation, which has been highly controversial, aims to harmonise data protection laws across the EU. It will introduce new rules on data profiling, getting consent to use personal data, and reporting data breaches to regulators and to people affected. It will introduce new fines of up to 4% of global turnover. The Regulation will come into force in 2018 and have direct effect in the EU member states. For more details, see our summary of the Regulation here. For the Parliament’s press release and FAQs, click here.

The text of the Regulation is here.