After almost four years of debate, the European Commission, Parliament and Council finally reached political agreement on the proposed General Data Protection Regulation (the "GDPR") in December 2015. The final official text of the GDPR has yet to be released and is currently still subject to legal-linguistic review. However, a compromise text has been made available on the European Parliament's website and, whilst there may be some tweaking around the edges before the final version is published in the Official Journal, this offers a good insight for organisations as to what will be required of them when the GDPR finally comes into effect.

Our data protection ebulletin here gives an overview of what has been agreed in relation to some of the key compliance issues for organisations, including as to data security and sanctions which are not only relevant from a pure data protection compliance perspective, but also in the broader context of data issues and cyber security.

Key contacts

Samantha Brown photo

Samantha Brown

Managing Partner, Employment, Pensions and Incentives, UK and EMEA, London

Steve Bell photo

Steve Bell

Managing Partner, Employment, Industrial Relations and Safety, Asia and Australia, Melbourne

Emma Rohsler photo

Emma Rohsler

Partner, Head of Employment, Pensions and Incentives, EMEA, Paris

Fatim Jumabhoy photo

Fatim Jumabhoy

Partner, Head of Employment & Workplace Investigations, Asia, Singapore