| Country |
Last reviewed |
Timescale for implementation e.g confirmed or estimated dates, deadlines |
|---|---|---|
| Austria | 05.06.2018 | The ADPA was adopted on 29 June 2017 and is applicable since 25 May 2018. There is no timescale for sector-specific data protection laws. Those provisions will follow step by step. |
| Belgium | 08.10.2018 | The BPA entered into force on 5 September 2018. |
| Czech Republic | 13.09.2018 | DPA to be effective as of its publication in the Collection of Laws (after passing the legislative procedure).There is no estimated date of enactment for the new DPA in the Parliament. |
| Denmark | 06.09.2018 | The Danish Data Protection Act passed on 17 May 2018. |
| Finland | 13.11.2018 | Originally, the Data Protection Act was intended to come into force on the same day as the GDPR, on 25th May 2018. On 9th May 2018, the Parliament's Constitutional Law Committee stated that this deadline was too tight and the parliamentary process would need more time. After several discussions in various Parliamentary committees, the Parliament plenary meeting approved the Data Protection Act on 13 November 2018. The Act will come into force after approval by the President and publication in the Official Gazette. The date for this is not yet confirmed. |
| France | 11.02.2019 | N/A |
| Germany | 23.05.2018 | GDPAA passed on 5 July 2017. No estimated deadline for data protection laws of the German Federal States ('Bundesländer') and sector-specific data protection laws. |
| Hungary | 01/04/2019 | On 01 October 2018 the Ministry of Justice published a draft bill regarding the amendment of sectorial data protection laws. |
| Ireland | 7.06.2018 | n/a |
| Italy | 25.10.2018 | In force. It is possible to read the consolidated text of the IDPA, as amended by the Decree, at the following link: https://bit.ly/2DcqPhm |
| Netherlands | 17.09.2018 | The proposal was adopted by the House of Representatives on 13 March 2018. The Senate (Committee of Justice and Security) adopted the final report on 24 April 2018. The Act was adopted as a formality on May 15, 2018. The GDPR Execution Act ("UAVG") became effective on 22 May 2018. In discussions in Parliament it was considered that further area-specific data protection rules could be introduced at a later stage. |
| Poland | 07.09.2018 | The PDPA became law on 25 May 2018. It is uncertain when the ASA will become the law, it is highly possible that it will happen at the end of 2018/beginning of 2019. |
| Slovakia | 13.09.2018 | The New DPA is effective as of 25 May 2018. |
| Spain | 05.03.2019 | 7 December 2018 |
| Sweden | 06.09.2018 | The new Data Protection Act, as well as the Swedish Data Protection Regulation entered into force on 25 May 2018. |
| UK | 23.05.2018 | 25 May 2018 |
