🇪🇺European Union
GDPR compliance in European Union
The GDPR is directly applicable across all 27 EU member states since May 2018. It harmonizes data protection rules while allowing member states to specify certain provisions through national law.
Enforcement authority
European Data Protection Board (EDPB) coordinates; each member state has a national DPA
Maximum sanctions
Up to EUR 20 million or 4% of global annual turnover. Over EUR 4.5 billion in fines issued since 2018 across the EU.
Key obligations
What GDPR requires from organizations operating in European Union.
Appoint a Data Protection Officer (DPO) for public authorities and large-scale processing
Maintain Records of Processing Activities (ROPA) under Article 30
Conduct Data Protection Impact Assessments for high-risk processing
Implement data breach notification to supervisory authority within 72 hours
Ensure valid legal basis under Article 6 for all personal data processing
Local context in European Union
The EDPB issues binding decisions on cross-border cases. Ireland, Luxembourg, and France handle the largest volume of cross-border complaints due to tech company headquarters locations.
GDPR by industry in European Union
Frequently asked questions
How does GDPR apply in European Union?
The GDPR is directly applicable across all 27 EU member states since May 2018. It harmonizes data protection rules while allowing member states to specify certain provisions through national law.
Who enforces GDPR in European Union?
European Data Protection Board (EDPB) coordinates; each member state has a national DPA
What are the penalties for GDPR non-compliance?
Up to EUR 20 million or 4% of global annual turnover. Over EUR 4.5 billion in fines issued since 2018 across the EU.
GDPR in other jurisdictions
Check your GDPR compliance now
Run a free scan to see your risk score and applicable obligations.