theseeus.eu Data

GDPR

← All instruments
in forcehorizontal
Type
regulation
Layer
horizontal
Status
in force
In force
2016-05-24
Key date
2018-05-25 applies
CELEX
32016R0679
Last verified
2026-07-21
Official text
EUR-Lex / official source

General Data Protection Regulation (GDPR)

Stub — deep dive in preparation. Key metadata above is sourced from EUR-Lex; the full explainer for this instrument is still being written. The Cyber area has a dedicated page on GDPR’s security and breach-notification provisions.

Regulation (EU) 2016/679 — the EU’s horizontal framework for processing personal data, with extraterritorial reach and the reference point every other data law defers to.

What it does (at a glance)

  • Principles (lawfulness, purpose limitation, minimisation) and legal bases.
  • Data-subject rights: access, erasure, portability, objection.
  • Controller/processor duties: accountability, DPIAs, DPOs, records of processing.
  • Breach notification (72h to the supervisory authority).
  • Fines up to €20M or 4% of worldwide turnover.

Watch items

  • ⚠️ VERIFY — the November 2025 Digital Omnibus proposed targeted GDPR amendments (simplification package). Track the legislative procedure before relying on details.

Sources