Timescale for implementation


Last reviewed
Timescale for implementation 
e.g confirmed or estimated dates, deadlines
Austria 05.06.2018 The ADPA was adopted on 29 June 2017 and is applicable since 25 May 2018.

There is no timescale for sector-specific data protection laws. Those provisions will follow step by step. 
Belgium 08.10.2018 The BPA entered into force on 5 September 2018.
Czech Republic 13.09.2018 DPA to be effective as of its publication in the Collection of Laws (after passing the legislative procedure).There is no estimated date of enactment for the new DPA in the Parliament.
Denmark 06.09.2018 The Danish Data Protection Act passed on 17 May 2018.
Finland 13.11.2018 Originally, the Data Protection Act was intended to come into force on the same day as the GDPR, on 25th May 2018. On 9th May 2018, the Parliament's Constitutional Law Committee stated that this deadline was too tight and the parliamentary process would need more time. After several discussions in various Parliamentary committees, the Parliament plenary meeting approved the Data Protection Act on 13 November 2018. The Act will come into force after approval by the President and publication in the Official Gazette. The date for this is not yet confirmed.
France 11.02.2019 N/A
Germany 23.05.2018 GDPAA passed on 5 July 2017. No estimated deadline for data protection laws of the German Federal States ('Bundesländer') and sector-specific data protection laws.
Hungary 01/04/2019 On 01 October 2018 the Ministry of Justice published a draft bill regarding the amendment of sectorial data protection laws.
Ireland  7.06.2018  n/a
Italy 25.10.2018 In force. It is possible to read the consolidated text of the IDPA, as amended by the Decree, at the following link: https://bit.ly/2DcqPhm
Netherlands 17.09.2018 The proposal was adopted by the House of Representatives on 13 March 2018. The Senate (Committee of Justice and Security) adopted the final report on 24 April 2018.

The Act was adopted as a formality on May 15, 2018. The GDPR Execution Act ("UAVG") became effective on 22 May 2018.

In discussions in Parliament it was considered that further area-specific data protection rules could be introduced at a later stage.
Poland 07.09.2018 The PDPA became law on 25 May 2018. It is uncertain when the ASA will become the law, it is highly possible that it will happen at the end of 2018/beginning of 2019.
Slovakia 13.09.2018 The New DPA is effective as of 25 May 2018.
Spain 05.03.2019 7 December 2018
Sweden 06.09.2018 The new Data Protection Act, as well as the Swedish Data Protection Regulation entered into force on 25 May 2018.
UK 23.05.2018 25 May 2018