Specifying the GDPR

This page lists resources on the General Data Protection Regulation (GDPR), prepared in the context of the 'Specifying the GDPR: Member States' perspectives' series of events organised by the Brussels Privacy Hub (BPH).

General resources

Legislation

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Corrigendum. Latest consolidated version.

Institutional resources

Other online resources

Austria

Legislation

Institutional resources

Belgium

Legislation

Institutional resources

Other references

  • De Smedt, S. and V. Verstraeten (2018), "Belgium: Substantial Reform of Supervisory Authority and Framework Implementing Act Finally Adopted", EDPL, 4:3, pp. 353-359.

Cyprus

Legislation

  • Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data of 2018 (Law 125(I)/2018) (unofficial English translation).

Institutional resources

References

  • Markou, C. (2019), "Cyprus: A Look into the Law for the Effective Application of the GDPR", EDPL, 5:3, pp. 389-396.

Czech Republic

Legislation

  • Zákon ze dne 12. března 2019 o zpracování osobních údajů (original); Czech Act No. 110/2019 Coll., act of 12 March 2019 on personal data processing (English and German translations).

Institutional resources

Denmark

Legislation

Institutional resources

France

Legislation

Institutional resources

Other references

  • Cheruy, L. et al. (eds.) (2019), Protection des données personnelles: Réussir sa mise en conformité, 2ème édition, Éditions Législatives.
  • Tambou, O. (2019), "Lessons from the First Post-GDPR Fines of the CNIL against Google LLC", EDPL, 5:1, pp. 80-84.
  • Tambou, O. (2018), "France: The French Approach to the GDPR Implementation", EDPL, 4:1, pp. 88-94.

Finland

Legislation

Institutional resources

Other resources

  • Korpisaari, P. (2019), "Finland: A Brief Overview of the GDPR Implementation", EDPL, 5:2, pp. 232-237.

Germany

Legislation

Institutional resources

Other references

  • Broy, D. (2017), "Germany: Starting Implementation of the GDPR - Brief Overview of the Government Bill for a New Federal Data Protection Act", EDPL, 3:1, pp. 93-97.
  • Etteldorf, C. (2019), "Germany Revisited: The Second Data Protection Adaptation and Implementation Act", EDPL, 5:3, pp. 397-403.

Greece

Legislation

  • Law 4624/2019 - Νόμος 4624/2019 (ΦΕΚ Α' 137/29-08-2019) [Εφαρμογή GDPR - Άρση των capital controls] Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, μέτρα εφαρμογής του Κανονισμού (ΕΕ) 2016/679 για την προστασία των φυσικών προσώπων έναντι της επεξεργασίας δεδομένων προσωπικού χαρακτήρα, ενσωμάτωση στην εθνική νομοθεσία της Οδηγίας (ΕΕ) 2016/680 και άλλες διατάξεις.

Institutional resources

Other

Hungary

Legislation

Institutional resources

Ireland

Legislation

Institutional resources

Other references

  • McLaughlin, S. (2018), "Ireland: A Brief Overview of the Implementation of the GDPR", EDPL, 4:2, pp. 227-234.

Italy

Legislation

  • Codice in materia di protezione dei dati personali (d.lgs. 196/2003) modificato dal d.lgs. 101/2018.
  • Decreto Legislativo 10 agosto 2018, n. 101, Dispozioni per l'adequamento della normativa nazionale alle dispozioni del regolamento (UE) 2016/679 del Parlamento europeo e del Consiglio, del 27 aprile 2016, relativo alla protezione delle persone fisiche con riguardo al trattamento dei dati personali, nonche' alla libera circolazione di tali dati e che abroga la direttiva 95/46/CE (regolamento generale sulla protezione dei dati).

Institutional resources

Other references

  • Finocchiario, G. (2018), "Italy: The Legislative Procedure for National Harmonisation with the GDPR", EDPL, 4:4, pp. 496-499.
  • Malgieri G. and Comandé G. (2019), Guida al trattamento e alla sicurezza dei dati personali. Le opportunità e le sfide del Regolamento UE e del codice italiano riformato, IlSole24Ore.
  • T4DATA – Training for Data project (2018–2019)
  • SMEDATA project.

Latvia

Legislation

Institutional resources

Other references

  • Burkevics, A. (2018), "Latvia: Draft Personal Data Processing Law", EDPL, 4:1, pp. 95-96.

Luxembourg

Legislation

Institutional resources

Other references

  • Andra, G. (2017), "Luxembourg: Reshaping the National Context to Adjust to the GDPR", EDPL, 3:3, pp. 372-375.

Malta

Legislation

Institutional resources

Netherlands

Legislation

Institutional resources

Other references

  • Breitbarth, P. (2018), "Netherlands: The GDPR Implementation Act", EDPL, 4:3, pp. 360-365.

Poland

Legislation

Institutional resources

  • UODO website.
  • Annual report 2018 (Sprawozdanie z działalności Prezesa Urzędu Ochrony Danych Osobowych w roku 2018).

Other references

  • Czerniawski, M. and M. Kawecki (2019), Ustawa o ochronie danych osobowych. Komentarz, C. H. Beck.
  • Kobylańska, A. and M. Lewoszewski (2017), "Poland: A Brief Overview Concerning the Implementation of the GDPR", EDPL, 3:4, pp. 507-511.

Portugal

Legislation

  • Lei n.º 58/2019, de 8 de agosto que assegura a execução, na ordem jurídica nacional, do Regulamento (UE) 2016/679 do Parlamento e do Conselho, de 27 de abril de 2016, relativo à proteção das pessoas singulares no que diz respeito ao tratamento de dados pessoais e à livre circulação desses dados (RGPD).
  • Deliberation related to the non-application of some provisions of the Law n.° 58/2019 by the Portuguese DPA, 23.9.2019.

Institutional resources

Other

Romania

Legislation

  • Law No. 190/2018 on measures for the application of the GDPR: original version.

Institutional resources

Other references

  • Petroiu, M. (2018), "Romania: Overview of the GDPR Implementation", EDPL, 4:3, pp. 366-369.
  • Ungureanu, C. T. (2018), "Legal remedies for personal data protection in European Union", Logos, Universality, Mentality, Education, Novelty, Section: Law 6.2, pp. 26-47.

Other

  • Association for Technology and Internet (ApTI) complaint to the European Commission regarding Romanian law.

Slovenia

Legislation

Institutional resources

Spain

Legislation

Case law

Institutional resources

Other references

  • García Mahamut, R. and B. Tomás Mallén (eds.) (2019), El Reglamento General de Protección de Datos: Un Enfoque Nacional y Comparado: Especial Referencia a la LO 3/2018 de Protección de Datos y Garantía de los Derechos Digitales, Tirant lo Blanch.
  • Rallo Lombarte, A. (ed.) (2019), Tratado de Protección de Datos: Actualizado con la Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y Garantía de los Derechos Digitales, Tirant Lo Blanch.
  • Recio, M. (2017), "Spain: Preparations for a New Law on Data Protection to Implement the GDPR", EDPL, 3:3, pp. 376-379.
  • Requejo Isidro, M. (2017), La aplicación privada del derecho para la protección de las personas físicas en materia de tratamiento de datos personales en el reglamento (UE) 2016/679", LA LEY mercantil, No 42, Sección Empresa y empresario / Doctrina, Diciembre.

Sweden

Legislation

Institutional resources

Other references

  • C. Storr, and P. Storr (2018), "Sweden: Quantitative (but Qualitative?) Changes in Privacy Legislation", EDPL, 4:1, pp. 97-103.

United Kingdom

Legislation

Institutional resources

Other references

  • Woods, L. (2017), "United Kingdom: Heading Towards Brexit but with a Data Protection Bill Implementing GDPR", EDPL, 3:4, pp. 500-506.

EUCJ case law

Referring to the GDPR

Other references

GDPR and Member States' laws

  • McCullagh, K., O. Tambou and S. Bourton (eds.) (2019), National adaptations of the GDPR, Collection Open Access Book, Blogdroiteuropeen.
  • Wagner, J. and A. Benecke (2016), "National Legislation within the Framework of the GDPR: Limits and Opportunities of Member State Data Protection Law", EDPL, 2:3, pp. 353-361.

GDPR in general

  • Albrecht, J. P. and F. Jotzo (2017), Das neue Datenschutzrecht der EU: Grundlagen, Gesetzgebungsverfahren, Synopse, Nomos.
  • De Terwangne, C. and K. Rosier (eds.) (2018), Le Règlement général sur la protection des données (RGPD / GDPR): Analyse approfondie, Larcier.
  • Kuner, C., L. A. Bygrave, and C. Docksey (eds.) (2019), The EU General Data Protection Regulation (GDPR): A Commentary, Oxford University Press.
  • Piñar Mañas, J. L., M. Á. Caro and M. Recio Gayo (eds.) (2016), Reglamento General de Protección de Datos: Hacia un nuevo modelo europeo de privacidad, Editorial Reus.
  • Rallo Lombarte, A. and García Mahamut, R. (eds.) (2015), Hacia un nuevo derecho europeo de protección de datos: Towards a new european data protection regime, Tirant Lo Blanch.

Comparative studies of data protection in Europe

Private International Law issues

  • Pinheiro, L. D. L. (2018), "Law Applicable to Personal Data Protection on the Internet: Some Private International Law Issues", Anuario Español de Derecho Internacional Privado, 18, pp. 163-192.
  • Von Hen, J. and A. Bizer (2018), "Social Media and the Protection of Privacy: Current Gaps and Future Directions in European Private International Law", International Journal of Data Science and Analytics, 6.3, pp. 233-239.

EU data protection legal framework

  • González Fuster, G. (2014), The Emergence of Personal Data Protection as a Fundamental Right of the EU, Springer.
  • Hijmans, H. (2016), The European Union as Guardian of Internet Privacy: The Story of Art 16 TFEU, Springer.

About this page

Please note this page is work in progress. Coordination: Gloria González Fuster, Olga Gkotsopoulou and Gianclaudio Malgieri. Contributors: Laura Drechsler, Lina Jasmontaite, Sara Roda. We welcome and appreciate comments and suggestions, please contact by email.