The Council of the European Union issued a revised version of the General Data Protection Regulation (“GDPR”) on 6 April 2016 which was subsequently approved by the European Parliament on 14 April.

Following the Parliament’s approval, the GDPR will be translated and then published in the Official Journal (in roughly two to three months’ time). Twenty days after that publication it will be formally adopted. There is then a two year lead time before it comes into force, so likely to be summer 2018.

The GDPR will significantly impact how organisations collect and process the personal data of individuals.