The Assistant European Data Protection Supervisor and the Rapporteur for the Data Protection Regulation have discussed the General Data Protection Regulation (GDPR). They noted that the timeline that had been set for the end of 2015 was nearing, but there was optimism that there could be political agreement in this time. There are still some core compromises needed: for example, in relation to the requirement for a mandatory data protection officer, the question of consent and other grounds for processing data (in particular legitimate interests for processing), but the position is moving toward  a consensus. All parties foresee that the implementation period will be two years once the regulation is finalised.

Discussion recording