Esheria Regulatory Atlas

Data protection in European Union

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. Every result links to its stored legal text and available official source evidence.

10,526 matching statutes

• European Union

  adopting implementing rules concerning Regulation (EC) No 45/2001 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data

  32004D0644

  1 provisions

  This Decision sets extra data protection rules for the Council, including the DPO’s role, controller duties, staff confidentiality rules, and data subjects’ request rights.

  Decision Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2025/1225

  32025D1225

  1 provisions

  This Decision amends the earlier adequacy decision and makes it expire on 27 December 2025 unless it is extended.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2021/915

  32021D0915

  1 provisions

  This decision sets standard contractual clauses for controller-processor data processing and sets out obligations, safeguards, breach notice duties, sub-processor rules, transfer rules, and termination rights.

  In force Open & Chat

• European Union

  Information extracted from Provided Data, including information shared under subparagraph (h), shall be subject to the retention period applicable to the particular government authority according to its particular regulations and record retention schedules.

  32010D0016

  1 provisions

  The decision approves signing an EU-US agreement on financial messaging data sharing for counter-terrorism, with provisional application and privacy safeguards.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING REGULATION (EU) 2023/6

  32023R0006

  1 provisions

  MycoTechnology, Inc. gets a five-year exclusive authorisation to place this novel food on the EU market, and the protected scientific data cannot be used for a subsequent applicant without its agreement.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2021/914

  32021D0914

  3 provisions

  This decision sets standard contractual clauses for transferring personal data to third countries and assigns obligations to data exporters and data importers.

  In force Open & Chat

• European Union

  DIRECTIVE (EU) 2023/2123 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32023L2123

  1 provisions

  Member States must update national law by 1 November 2025 and tell the Commission. The directive also limits certain personal data processing and exchange to terrorist-offence and Europol-competent law-enforcement purposes.

  In force Open & Chat

• European Union

  COUNCIL IMPLEMENTING DECISION (EU) 2017/945

  32017D0945

  1 provisions

  This Decision lets the listed Member States continue exchanging DNA-related personal data under Decision 2008/615/JHA.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) 2017/1485

  32017R1485

  8 provisions

  TSOs must develop the terms and conditions or methodologies required by this Regulation and submit them for approval to the relevant approving authority. This provision sets out how TSOs must cooperate, consult, submit, and publish terms and methodologies, and how regulatory authorities, the Agency, and the Commission handle approvals, opinions, disputes, and deadlines. TSOs must manage voltage, short-circuit current, power flows, contingency planning, protection, stability, and extensive data exchange with DSOs and grid users. TSOs must run training and operational security processes, keep training records, and ensure operational testing does not endanger system security. They also have rights to test SGU compliance and request relevant network information from other TSOs. Regional security coordinators and TSOs must coordinate outage and adequacy planning, share relevant information, and meet several deadline-based planning and reporting steps.

  In force Open & Chat

• European Union

  DECISION (EU) 2024/2245 OF THE EUROPEAN PARLIAMENT

  32024B2245

  1 provisions

  The European Parliament grants discharge for the European Data Protection Supervisor’s 2022 budget implementation and tells its President to forward the decision and resolution for publication.

  Decision Open & Chat

• European Union

  COMMISSION IMPLEMENTING REGULATION (EU) 2025/2055

  32025R2055

  5 provisions

  This regulation sets rules for using DubliNet and for exchanging asylum-related information, forms, and transfer data between Member States and the Asylum Agency.

  In force Open & Chat

• European Union

  COUNCIL IMPLEMENTING DECISION (EU) 2017/947

  32017D0947

  1 provisions

  This Decision lets certain Member States keep receiving and supplying vehicle-registration personal data, and lets those Member States keep processing data they already obtained.

  In force Open & Chat