Journalist briefing pack
General Data Protection Regulation (GDPR)
Deadline-ready summary derived from the Policy Window catalog. Every claim cites a primary source. As of 2026-06-04.
Editor-of-record: Editorial board (in formation) (Policy Window) — last reviewed 2026-05-31
Key finding
Data-subject rights baseline plus extraterritorial scope; Art. 22 automated-decision protections anchor most AI-fairness enforcement actions across EU DPAs.
Pull quote (operative text)
“The data subject shall have the right not to be subject to a decision based solely on automated processing (Art. 22(1)).”
Topics this instrument addresses
- governsBiometric Identification— Art. 9 special-category processing (biometric data for unique identification); Art. 22 ADM with safeguards
- governsTransparency Obligations— Arts. 12-14 (information to data subjects); Art. 13(2)(f) + 14(2)(g) meaningful information about ADM logic; Art. 22(3) suitable safeguards
- governsIndividual Redress— Art. 77 DPA complaint; Art. 79 effective judicial remedy; Art. 80 collective representation by NGOs; Art. 82 right to compensation; Art. 83 administrative fines
- governsTraining-Data Rights— Art. 5(1)(b) purpose limitation; Art. 6 lawful basis; Art. 9 special-category overlay for sensitive training data; Art. 5(1)(c) data minimisation
Cite this briefing
MLA (9th edition)
Policy Window. "General Data Protection Regulation (GDPR)." Policy Window AI Governance Catalog, 2026-06-04, http://localhost:3000/wiki/gdpr?asOf=2026-06-04.
AP (current style — newsroom-grade)
Policy Window AI Governance Catalog, "General Data Protection Regulation (GDPR)," accessed 2026-06-04, http://localhost:3000/wiki/gdpr?asOf=2026-06-04.
Chicago (17th edition, notes-bibliography)
Policy Window, "General Data Protection Regulation (GDPR)," Policy Window AI Governance Catalog, accessed 2026-06-04, http://localhost:3000/wiki/gdpr?asOf=2026-06-04.
APA (7th edition, author-date)
Policy Window. (2026). General Data Protection Regulation (GDPR) [Snapshot 2026-06-04]. Policy Window AI Governance Catalog. http://localhost:3000/wiki/gdpr?asOf=2026-06-04
CC BY 4.0 content. Citation conventions documented at /wiki/citing-us.
What this briefing IS: a deadline-shaped slice of the typed catalog at /wiki/gdpr. Key finding + pull quote + crosswalk are editor-curated when present; honest-empty when not. Charter §7.1.a holds: never advocacy framing.
What this briefing is NOT: a substitute for direct verification of primary sources before publication. Not legal advice (charter §7.4). Not real-time (editorial cadence).