Esheria Regulatory Atlas

Data protection in European Union

Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.

10,526 matching statutes

• European Union

  2. EU-sourced PNR data may also be processed on a case-by-case basis where necessary for the protection of the vital interests of the data subject or other persons, in particular as regards the risk of death or serious injury to the data subjects or others, or a significant public health risk, in particular as required by internationally recognised standards, such as the World Health Organisation’s International Health Regulations (2005).

  32008D0651

  1 provisions

  The agreement lets Australia process EU-sourced PNR data for specified law-enforcement and related purposes, with limits on disclosure, retention, security, and deletion.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING REGULATION (EU) 2025/2215

  32025R2215

  5 provisions

  This Regulation amends the existing Union authorisation for SOPUROXID and replaces the Annex text.

  In force Open & Chat

• European Union

  COMMISSION DECISION (EU) 2020/1502

  32020D1502

  1 provisions

  The Commission must give data subjects information about personal data processing, and it may restrict some data-subject rights in defined cases while recording and reviewing those restrictions.

  In force Open & Chat

• European Union

  DIRECTIVE (EU) 2016/681 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32016L0681

  2 provisions

  Air carriers must transfer PNR data to the relevant PIU, and Member States must set up PIUs and impose data-protection safeguards.

  In force Open & Chat

• European Union

  pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework

  32023D1795

  10 provisions

  The decision says personal data may be transferred from EU controllers and processors to certified U.S. organisations without further authorisation, but certified organisations must follow the Framework’s rules.

  In force Open & Chat

• European Union

  HAVING REGARD to US statutes and regulations requiring each air carrier operating passenger flights in foreign air transportation to or from the United States to provide DHS with electronic access to PNR data to the extent that they are collected and contained in the air carrier's automated reservation/departure control systems (hereinafter ‘reservation systems’),

  32006D0729

  1 provisions

  This Decision approves signing an EU–US agreement on passenger name record (PNR) data and authorises provisional application. It also allows Member State authorities, in some cases, to suspend data flows to DHS, and requires reporting to the Council and Commission.

  In force Open & Chat

• European Union

  REGULATION (EU) 2024/1358 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32024R1358

  6 provisions

  This part explains that Eurodac is established for comparing biometric data, and that Member States must take and transmit biometric data for covered persons, including children from age six, with some data stored in Eurodac within 72 hours after status is granted.

  In force Open & Chat

• European Union

  COMMISSION DECISION (EU) 2020/969

  32020D0969

  1 provisions

  The Decision sets internal Commission rules for the DPO, DPCs, controllers, data-subject information, and when data-subject rights may be restricted.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 1136/2014

  32014R1136

  1 provisions

  This regulation amends transitional measures for plant protection product procedures and sets that it enters into force 20 days after publication.

  In force Open & Chat

• European Union

  DIRECTIVE (EU) 2017/1371 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

  32017L1371

  2 provisions

  This Directive sets EU minimum rules for criminal offences and sanctions protecting the Union’s financial interests, including fraud, corruption, money laundering, and related penalties.

  In force Open & Chat

• European Union

  Personal data relating to members of the group should be processed in accordance with Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data(4),

  32008D0542

  1 provisions

  The Commission sets up an expert group on credit histories and gives it tasks, membership rules, operating rules, and expense arrangements.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING DECISION (EU) 2022/254

  32022D0254

  10 provisions

  The decision says personal data may be transferred to controllers and processors in the Republic of Korea without needing any further authorisation.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 545/2011

  32011R0545

  4 provisions

  This provision sets data and testing requirements for plant protection products and says the regulation applies from 14 June 2011.

  Regulation Open & Chat

• European Union

  COMMISSION IMPLEMENTING REGULATION (EU) 2023/1537

  32023R1537

  1 provisions

  Member States must provide aggregated statistics on plant protection products and send them to the Commission (Eurostat), with specific data content, quality, classification, and deadlines.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 284/2013

  32013R0284

  5 provisions

  This regulation sets the data requirements that applicants must submit for plant protection products.

  In force Open & Chat

• European Union

  COUNCIL DECISION (EU) 2016/2220

  32016D2220

  1 provisions

  The Council Decision approves the EU-US agreement on personal information protection and requires the President of the Council to give the notification under the Agreement.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 611/2013

  32013R0611

  1 provisions

  Providers of publicly available electronic communications services must notify personal data breaches to the competent national authority, and sometimes also affected subscribers or individuals.

  In force Open & Chat

• European Union

  COUNCIL DECISION (EU) 2021/121

  32021D0121

  1 provisions

  The Member States must express the Union’s position in reply to the referenced ICAO State Letter.

  In force Open & Chat

• European Union

  COMMISSION REGULATION (EU) No 36/2010

  32010R0036

  2 provisions

  This Regulation sets common EU models and forms for train driving licences, complementary certificates, certified copies, and application forms.

  In force Open & Chat

• European Union

  COMMISSION IMPLEMENTING REGULATION (EU) 2015/1013

  32015R1013

  2 provisions

  This regulation sets procedural rules for licensing, registration, annual reporting, and database listing for drug precursors, and assigns related duties to operators, Member States, the Commission, and competent authorities.

  In force Open & Chat