General Data Protection Regulation编辑历史

# General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union in 2018, designed to harmonize data protection rules across member states and strengthen individuals' control over their personal data. It applies to any organization processing the personal data of EU residents, regardless of the organization's location, and has become a global benchmark for privacy regulation.

## 1 Background and History

### 1.1 Pre-GDPR Data Protection Directives

Before the GDPR, data protection in the European Union was governed primarily by Directive 95/46/EC, adopted in 1995. This directive required member states to implement national laws based on common principles, such as ensuring data quality, establishing rights for individuals, and mandating oversight by independent authorities. However, the directive allowed significant variation in national implementations, leading to fragmentation and inconsistencies across the Union.

### 1.2 Legislative Process and Adoption

The European Commission proposed a reform of the EU's data protection framework in January 2012. After over four years of negotiations among the Commission, the European Parliament, and the Council of the EU, the GDPR was adopted on 14 April 2016. A two‑year transition period followed, with the regulation becoming fully enforceable on 25 May 2018. The regulation replaced the 1995 directive and repealed its national implementing laws.

### 1.3 Key Drivers: Digital Economy and Privacy Concerns

Several factors spurred the reform. The rapid growth of the digital economy, including services such as social media, cloud computing, and e‑commerce, created new challenges for protecting personal data. High‑profile data breaches and revelations about large‑scale surveillance programs heightened public concern about privacy. The GDPR aimed to strengthen individual rights, create a single set of rules across the EU, and reduc