General Data Protection Regulation

Abstract

This report examines the new EU General Data Protection Regulation (GDPR) that will go into effect in May 2018 and will be directly applicable in all Member States without the need for implementing national legislation. Despite containing some onerous obligations for organizations, it protects and empowers all EU citizens' data privacy. Adoption of the regulation is a huge step towards EU Digital Single Market and expanded territorial scope of the GDPR will ensure a more balanced interaction between data controllers within and outside the EU.