Esheria Regulatory Atlas

Data protection in European Union

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.

8,003 matching statutes

• European Union

  Having regard to Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data(1), and in particular Article 42(1) thereof,

  32014D0886

  1 provisions

  This Decision appoints the European Data Protection Supervisor and Assistant Supervisor and states when it takes effect.

  Decision Open & Chat

• European Union

  DECISION (EU) 2020/655 OF THE EUROPEAN CENTRAL BANK

  32020D0655

  1 provisions

  This Decision sets ECB rules for data protection, including the DPO, controllers, data protection coordinators, and how data subjects can exercise their rights.

  In force Open & Chat

• European Union

  COUNCIL REGULATION (EU) 2017/1939

  32017R1939

  6 provisions

  This part explains how the EPPO is set up and how it can work with national authorities on offences affecting the EU’s financial interests.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) 2022/1440

  32022R1440

  3 provisions

  This regulation changes the data requirements for plant protection products containing micro-organisms and sets transitional rules for when applicants may use the old or amended requirements.

  In force Open & Chat

• European Union

  Decision No 1247/2002/EC of the European Parliament, of the Council and of the Commissionof 1 July 2002on the regulations and general conditions governing the performance of the European Data-protection Supervisor's dutiesTHE EUROPEAN PARLIAMENT, THE COUNCIL OF THE EUROPEAN UNION AND THE COMMISSION OF THE EUROPEAN COMMUNITIES,Having regard to the Treaty establishing the European Community,Having regard to Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 200

  32002D1247

  1 provisions

  This Decision sets remuneration-related parity for the European Data-protection Supervisor and the Assistant Supervisor, requires appointment through a public call for candidates, fixes their seat in Brussels, and says the Decision enters into force the day after publication.

  Decision Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 110/2011

  32011R0110

  1 provisions

  Member States must send the required net social protection benefits data and annual quality information in the formats set out in the annexes, and the annual quality report is due by 31 January of year N + 3.

  In force Open & Chat

• European Union

  On 2 December 2010, the Council adopted a Decision authorising the Commission to open negotiations on behalf of the Union with Australia for the transfer and use of Passenger Name Record (PNR) data to prevent and combat terrorism and other serious transnational crime.

  32012D0381

  2 provisions

  This text sets rules for transferring EU-sourced PNR data to Australia, limits its use, and gives individuals access, correction, and complaint rights.

  In force Open & Chat

• European Union

  REGULATION (EC) No 458/2007 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32007R0458

  1 provisions

  This regulation sets up ESSPROS, a common EU system for social protection statistics, and sets deadlines for data transmission, publication, and dissemination.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2016/2295

  32016D2295

  1 provisions

  This Decision updates EU adequacy decisions so that Member States must promptly tell the Commission when they suspend or stop personal-data flows, and the Commission must keep monitoring whether the third countries still provide adequate protection.

  In force Open & Chat

• European Union

  REGULATION (EU) 2022/991 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32022R0991

  4 provisions

  This provision says Europol’s role is being expanded to support Member States more broadly, especially on cross-border crime, data processing, and cooperation with private parties and other bodies.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2025/2571

  32025D2571

  2 provisions

  This decision updates the UK adequacy assessment for law-enforcement personal data and describes revised UK rules on consent, data subject rights, automated decisions, transfers, oversight, and enforcement.

  In force Open & Chat

• European Union

  REGULATION (EU) 2022/868 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32022R0868

  4 provisions

  This part explains the EU data governance framework, including data re-use rules for public-sector data, data intermediation services, data altruism, and safeguards for protected data.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2026/179

  32026D0179

  5 provisions

  The Decision says EU controllers and processors may transfer personal data to Brazil without needing extra authorisation, because Brazil is treated as having an adequate level of protection.

  In force Open & Chat

• European Union

  Having regard to Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data(1), and in particular Article 42(1) thereof,

  32009D0030

  1 provisions

  The European Parliament and the Council appoint the European Data Protection Supervisor and the Assistant Supervisor together, for a five-year period starting 17 January 2009.

  Decision Open & Chat

• European Union

  REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32016R0679

  8 provisions

  This segment explains the GDPR’s scope and key principles: personal data is protected, some activities are outside scope, Member States may add national specifications in limited situations, and controllers must identify authorised persons in some pseudonymisation cases.

  In force Open & Chat

• European Union

  COMMISSION DECISION (EU) 2026/1446

  32026D1446

  1 provisions

  The Commission must publish a data protection notice, inform certain data subjects about processing, and can restrict some data-protection rights under strict conditions.

  Decision Open & Chat

• European Union

  REGULATION (EU) 2026/1165 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32026R1165

  1 provisions

  This Regulation amends biocidal product rules to extend certain data protection periods to 31 December 2030 and lets data owners seek compensation for a specified unprotected period.

  In force Open & Chat

• European Union

  adopting implementing rules concerning the Data Protection Officer pursuant to Article 24(8) of Regulation (EC) No 45/2001 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data

  32008D0597

  1 provisions

  The Commission must appoint a Data Protection Officer, and the DPO and related staff have defined data-protection tasks, powers, and reporting duties within the Commission.

  Decision Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 263/2011

  32011R0263

  1 provisions

  Member States must send ESSPROS net social protection benefits data to Eurostat every year, and Eurostat must publish and disseminate the data only in aggregated or permitted forms.

  In force Open & Chat

• European Union

  pursuant to Regulation (EC) No 45/2001 of the European Parliament and of the Council on the adequate level of protection provided by Japan for personal data transferred from the European Union in the specific cases of transfer by the European Commission to Japanese customs authorities under Decision No 1/2010 of the Joint Customs Cooperation Committee pursuant to Article 21 of the Agreement between the European Community and the Government of Japan on cooperation and mutual administrative assist

  32011D0197

  1 provisions

  The Commission decides that Japan offers an adequate level of protection for certain personal data transferred by the Commission under Decision No 1/2010.

  In force Open & Chat