Esheria Regulatory Atlas

Data protection in European Union

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. Every result links to its stored legal text and available official source evidence.

10,526 matching statutes

• European Union

  REGULATION (EU) 2022/991 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32022R0991

  4 provisions

  This provision says Europol’s role is being expanded to support Member States more broadly, especially on cross-border crime, data processing, and cooperation with private parties and other bodies.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2025/2571

  32025D2571

  2 provisions

  This decision updates the UK adequacy assessment for law-enforcement personal data and describes revised UK rules on consent, data subject rights, automated decisions, transfers, oversight, and enforcement.

  In force Open & Chat

• European Union

  REGULATION (EU) 2022/868 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32022R0868

  4 provisions

  This part explains the EU data governance framework, including data re-use rules for public-sector data, data intermediation services, data altruism, and safeguards for protected data.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2026/179

  32026D0179

  5 provisions

  The Decision says EU controllers and processors may transfer personal data to Brazil without needing extra authorisation, because Brazil is treated as having an adequate level of protection.

  In force Open & Chat

• European Union

  Having regard to Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data(1), and in particular Article 42(1) thereof,

  32009D0030

  1 provisions

  The European Parliament and the Council appoint the European Data Protection Supervisor and the Assistant Supervisor together, for a five-year period starting 17 January 2009.

  Decision Open & Chat

• European Union

  REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32016R0679

  8 provisions

  This segment explains the GDPR’s scope and key principles: personal data is protected, some activities are outside scope, Member States may add national specifications in limited situations, and controllers must identify authorised persons in some pseudonymisation cases.

  In force Open & Chat

• European Union

  COMMISSION DECISION (EU) 2026/1446

  32026D1446

  1 provisions

  The Commission must publish a data protection notice, inform certain data subjects about processing, and can restrict some data-protection rights under strict conditions.

  Decision Open & Chat

• European Union

  DIRECTIVE (EU) 2016/680 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32016L0680

  4 provisions

  This provision explains how personal data in criminal-justice processing should be protected, including purpose limits, data security, data subject rights, and breach notification.

  In force Open & Chat

• European Union

  REGULATION (EU) 2026/1165 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32026R1165

  1 provisions

  This Regulation amends biocidal product rules to extend certain data protection periods to 31 December 2030 and lets data owners seek compensation for a specified unprotected period.

  In force Open & Chat

• European Union

  adopting implementing rules concerning the Data Protection Officer pursuant to Article 24(8) of Regulation (EC) No 45/2001 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data

  32008D0597

  1 provisions

  The Commission must appoint a Data Protection Officer, and the DPO and related staff have defined data-protection tasks, powers, and reporting duties within the Commission.

  Decision Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 263/2011

  32011R0263

  1 provisions

  Member States must send ESSPROS net social protection benefits data to Eurostat every year, and Eurostat must publish and disseminate the data only in aggregated or permitted forms.

  In force Open & Chat

• European Union

  pursuant to Regulation (EC) No 45/2001 of the European Parliament and of the Council on the adequate level of protection provided by Japan for personal data transferred from the European Union in the specific cases of transfer by the European Commission to Japanese customs authorities under Decision No 1/2010 of the Joint Customs Cooperation Committee pursuant to Article 21 of the Agreement between the European Community and the Government of Japan on cooperation and mutual administrative assist

  32011D0197

  1 provisions

  The Commission decides that Japan offers an adequate level of protection for certain personal data transferred by the Commission under Decision No 1/2010.

  In force Open & Chat