The EU General Data Protection Regulation is a new regulatory framework for data protection and privacy. It has been discussed at length, but was finally adopted by the EU in March 2016. It came into force in May 2018.
The Regulation aims to strengthen citizens' rights and simplify rules for companies in the Digital Single Market. The nature of a Regulation (as opposed to a Directive) is that it doesn’t have to be transcribed and interpreted into legislation in member states – it just takes effect; hence there is a more common baseline of requirements with less inconsistency.
Make sure you meet your GDPR requirements... GET THE GDPR GUIDE NOW