On 4 May 2016, the long-awaited General Data Protection Regulation has been published.

The Regulation enters into force 20 days after its publication, but will only be applied two years later, i.e. as of 25 May 2018.

This period is to give Member States the time to adapt national legislation and to give companies the chance to adjust their processing activities and to design an appropriate framework.