Following the implementation of Directive 95/46/EC, European standards concerning the protection of personal data have been harmonized.
The General Data Protection Regulation (GDPR, regulation 2016/679 of 27 April 2016) was implemented on 25 May 2018.
It superseded the Directive of 1995. It includes new obligations and heavy penalties of up to millions of euros.
Personal data protection concerns all companies in all sectors, and in public and private domains, even if located outside the EU.