‘Europe’s data protection reform process is finally complete, with the new General Data Protection Regulation given a number (2016/679) and more importantly, a commencement date. It will apply from 25 May 2018. Assuming that the UK has not by then left the EU, it will affect almost all UK-based organisations in one way or another – and for the first time organisations outside the EU processing data relating to EU citizens. The text is essentially the same as that published last month (although I have to confess that I have not checked every word).’
Technology Law Update, 4th May 2016
Source: www.technology-law-blog.co.uk