After years of consulting, drafting, debating and lobbying, the EU Parliament (in second reading) voted on and adopted the GDPR in its plenary session on 14 April 2016. Click here for the official press release and here for the final text of the GDPR. As the next step, the GDPR text will be published in the Official Journal of the EU and will enter into force twenty days after such publication.

Organisations will be required to comply with the GDPR two years after its entry into force - likely to be a date sometime in May 2018. While two years might sound like a long time, becoming GDPR-compliant is not something that can be achieved overnight, and we recommend that organisations start that process now (if they haven’t already done so). To assist organisations in getting ready for the new rules under the GDPR, we have prepared the Baker & McKenzie GDPR Game Plan. Click here for a complimentary summary of your GDPR Game Plan.