Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.
10,526 matching statutes
European Union
32026R1165
1 provisions
This Regulation amends biocidal product rules to extend certain data protection periods to 31 December 2030 and lets data owners seek compensation for a specified unprotected period.
European Union
32008D0597
1 provisions
The Commission must appoint a Data Protection Officer, and the DPO and related staff have defined data-protection tasks, powers, and reporting duties within the Commission.
European Union
32011R0263
1 provisions
Member States must send ESSPROS net social protection benefits data to Eurostat every year, and Eurostat must publish and disseminate the data only in aggregated or permitted forms.
European Union
32011D0197
1 provisions
The Commission decides that Japan offers an adequate level of protection for certain personal data transferred by the Commission under Decision No 1/2010.
European Union
32025D1382
3 provisions
The EU Commission decides that transfers of personal data to the EPO may go ahead without extra authorisation because the EPO ensures adequate protection.
European Union
32004D0055
1 provisions
The European Parliament and the Council appoint the European Data Protection Supervisor and the Assistant Supervisor for five years, and the Decision must be published in the Official Journal.
European Union
32024D1043
1 provisions
The Commission may restrict certain data protection rights in harassment-related processing, but only under strict conditions and with required notice, review, and recordkeeping.
European Union
32026D1447
1 provisions
The Commission must tell affected data subjects how it processes their personal data and may restrict some data-subject rights only under specified conditions.
European Union
32016R0794
5 provisions
Europol is established to support law enforcement cooperation in the EU and to collect, store, process, analyse, and exchange criminal information.
European Union
32025D0628
1 provisions
The Commission must inform certain data subjects about personal data processing and may restrict some data-subject rights in limited cases.
European Union
32021D1093
1 provisions
This Decision sets rules for how the Council and the GSC handle personal data in connection with the DPO’s work, including who must do what, how requests and breaches are handled, and when data subject rights may be restricted.
European Union
32024D1245
1 provisions
The Commission may restrict some data-subject rights for Mediation Service processing, but it must publish information, notify people in specific cases, record its reasons, review restrictions, and delete data when retention ends.
European Union
32025D1226
1 provisions
This decision changes the earlier adequacy decision so it now expires on 27 December 2025 unless extended.
European Union
32012D0046
1 provisions
The Netherlands is entitled to receive and supply personal data for automated searching of dactyloscopic data, once Chapter 6 data protection provisions are fully implemented.
European Union
32026R1378
1 provisions
The regulation lets Chuta Nut GmbH market the expanded Jatropha curcas L. novel food in the EU for 5 years, and protects the supporting scientific data for 5 years against use by later applicants without the company’s agreement.
European Union
32014D0333
1 provisions
The Commission may process personal data in the e-Justice Portal only when necessary for the listed Portal purposes, and it must protect, limit, and not improperly store that data.
European Union
32024R0868
1 provisions
This regulation amends the Customs Information System rules to align personal data processing with EU data protection rules and adds a 9 October 2025 review requirement for older data.
European Union
32021D1773
5 provisions
The Decision says certain personal data transfers to the UK can proceed without further authorisation when the UK provides an adequate level of protection, subject to a few conditions and exceptions.
European Union
32013R0603
3 provisions
This provision sets up Eurodac and requires Member States to take and send fingerprints and related data for certain applicants within set time limits, while limiting access and transfers.
European Union
32021D1772
8 provisions
The Commission says personal data may be transferred to a third country without further authorisation if it has made an adequacy decision, but this decision does not cover UK immigration-control transfers.