EU Data Protection Reform: Update On Current Status And Highlights

In January 2012, the European Commission published a long-awaited reform package for European data protection legislation, which included the General Data Protection Regulation (the Regulation) and a Directive. The new legislation has far reaching consequences for companies inside and outside of the EU.

To become law, the new legislation requires approval from the European Parliament and the Council of the European Union (the Council). On 12 March 2014, the first stage of that process was completed when the European Parliament voted overwhelmingly in favour of adopting an amended form of the reform package. Once the Council's position is clear, negotiations will commence between the two institutions to agree on the final form.