Which international privacy law took effect in the European Union on 25 May 2018?

The General Data Protection Regulation took effect in the European Union on 25 May 2018.

The GDPR is a major EU framework governing the processing and protection of personal data. It applies to organizations established in the European Economic Area and can also apply to organizations outside it when they offer goods or services to people in the EU or monitor their behavior there.

The regulation gives individuals rights that include access to personal data, correction, erasure in certain circumstances, and data portability. It also requires organizations to establish lawful bases for processing and to report certain personal-data breaches promptly to supervisory authorities.

The GDPR is often confused with the earlier Data Protection Directive or with newer digital laws such as the Digital Services Act. Its enforcement can include significant administrative fines, but the rules are broader than penalties alone.