When did GDPR come into force?

The General Data Protection Regulation 2016/679  (GDPR) came into force on May 25, 2018, in the European Union and replaced the 1995 Data Protection Directive. The regulation was adopted in May 2016 and the EU member states had two years to ensure that GDPR is implemented by May 2018.

GDPR introduced major changes in how organizations in the EU handle personal data and gave residents rights over their data in accordance with the EU’s understanding of privacy as a fundamental right.