Print-friendly view · use your browser's Save as PDF option (Cmd/Ctrl-P) to attach this article to a brief.

General Data Protection Regulation (GDPR)

EU-GDPR-2016 · EU · binding regulation

Source: https://policywindow.org/wiki/gdpr

Generated 2026-05-31T10:13:36 UTC

Summary

Foundational EU personal-data protection regulation. Most-cited European instrument PW catalogues at the AI-governance boundary — every CNIL / Garante / AEPD / BfDI / DPC enforcement action against an AI system (Clearview, ChatGPT, Replika, automated-hiring complaints) invokes GDPR Arts. 5/6/9/22/35. Art. 22 (automated individual decision-making + profiling) is the load-bearing provision that interacts with EU AIA Art. 26(11) deployer use of AI-system output for decisions concerning natural persons. Art. 35 (DPIA) partially overlaps EU AIA Art. 27 FRIA; the EDPB is finalising a joint EDPB-AI-Office guideline on the AIA-FRIA / GDPR-DPIA interplay through 2026. Art. 9 (special-category processing) interacts with EU AIA Art. 5(1)(c)(d)(g) prohibitions on social scoring + emotion recognition in workplace + untargeted facial-image scraping. Enforced by national Data Protection Authorities; the European Data Protection Board (EDPB, formerly Art. 29 Working Party) coordinates one-stop-shop + Article 65 binding-decision procedures across DPAs.

At a glance

Adopted: 2016-04-27
Effective: 2018-05-25
Status: in force
Primary source: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1-88 (CELEX:32016R0679; ELI:http://data.europa.eu/eli/reg/2016/679/oj); applied from 25 May 2018.
Source URL: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A02016R0679

How to cite this article

APA

Policy Window. (2016). General Data Protection Regulation (GDPR) [Wiki article — Instrument]. https://policywindow.org/wiki/gdpr

Chicago

Policy Window. 2016. "General Data Protection Regulation (GDPR)." Wiki article (Instrument). https://policywindow.org/wiki/gdpr.

Harvard

Policy Window (2016) 'General Data Protection Regulation (GDPR)', Wiki article — Instrument, available at: https://policywindow.org/wiki/gdpr.

OSCOLA

Policy Window, 'General Data Protection Regulation (GDPR)' (Wiki article — Instrument, 2016) <https://policywindow.org/wiki/gdpr> accessed [date].

BibTeX

@misc{policywindow-gdpr,
  title  = {General Data Protection Regulation (GDPR)},
  author = {Policy Window},
  year   = {2016},
  howpublished = {Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1-88 (CELEX:32016R0679; ELI:http://data.europa.eu/eli/reg/2016/679/oj); applied from 25 May 2018.},
  url    = {https://policywindow.org/wiki/gdpr},
  note   = {Primary source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A02016R0679}
}