Publications on the General Data Protection Regulation (GDPR)
Jun 24, 2020 · Access reports, communications and other publications on the GDPR.
Data protection - European Commission
Jun 16, 2025 · Find out more about the rules for the protection of personal data inside and outside the EU, including the GDPR.
Legal framework of EU data protection - European Commission
Dec 11, 2018 · The General Data Protection Regulation (GDPR) Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free …
Data protection explained - European Commission
Read about key concepts such as personal data, data processing, who the GDPR applies to, the principles of the GDPR, the rights of individuals, and more.
Who the General Data Protection Law applies to
The GDPR applies to: a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or a company …
Rules for business and organisations - European Commission
Data protection obligations, principles and sanctions for businesses and organisations, such as hospitals.
How can I demonstrate that my organisation is compliant with the …
The GDPR provides businesses/organisations with a set of tools to help demonstrate accountability, some of which have to be mandatorily put in place. For example, in specific cases the establishment …
GDPR – the fabric of a success story - European Commission
The GDPR is a flexible, protective and effective tool, as it showed during the coronavirus outbreak. The GDPR allowed for coronavirus tracing apps to be developed, all while respecting personal data …
Data protection adequacy for non-EU countries
Jan 26, 2026 · Discover the procedure that allows the European Commission to determine whether a country outside the EU offers an adequate level of data protection.
Standard Contractual Clauses (SCC) - European Commission
Jun 4, 2021 · Read about EU Standard Contractual Clauses under the GDPR that are used for data transfers from controllers or processors from the EU to third countries.