Key EU legislation on the personal data protection and privacy. The General Data Protection Regulation (EU)2016/679 is in force since May 2018 in the EU and EEA countries. It aims to give the individuals control over their personal data, requires all data controllers to establish procedures and safeguards, and is very strict towards breaches committed by private companies.