Timescale for implementation


Last reviewed
Timescale for implementation 
e.g confirmed or estimated dates, deadlines
Austria 05.06.2018 The ADPA was adopted on 29 June 2017 and is applicable since 25 May 2018.

There is no timescale for sector-specific data protection laws. Those provisions will follow step by step. 
Belgium 17.05.2018 In the event that the Federal Parliament does not adopt the draft Belgian Data Protection Act before the 21st of July (before the parliamentary recess), it will in most likelihood be adopted at the beginning of the parliamentary year in October 2018.
Czech Republic 16.05.2018 DPA to be effective as of its publication in the Collection of Laws (after passing the legislative procedure). There is no estimated date of enactment of the new DPA in the Parliament.
Denmark 22.05.2018 Danish Data Protection Act passed on 17 May 2018
Finland 17.05.2018 Originally, the proposed Data Protection Act was intended to come into force on the same day as the GDPR, on 25th May 2018. On 9th May 2018, the Parliament's Constitutional Law Committee stated that the above mentioned schedule was too tight and they needed more time for the parliamentary process. A new date is not confirmed yet.
France 22.05.2018 We expect the new version of this act N°78-17 of 6 January 1978 on information technology, data files and civil liberties to be enacted in the next few weeks.
Germany 23.05.2018 GDPAA passed on 5 July 2017. No estimated deadline for data protection laws of the German Federal States ('Bundesländer') and sector-specific data protection laws.
Hungary 17.05.2018 The Ministry of Justice is likely to submit the draft to the government meeting in Q4 2017 and in this case it is likely that the Parliament will vote on it during Q1 2018.

As far as sectorial legislation is concerned there is no official information on the status of legislative progress.

Update (04 December 2017): as the Ministry of Justice has postponed the consultation on the InfoAct and sectorial DP laws it is unlikely that the new amendments will come into force earlier than Q2 2018.

Update (16 May 2018): The Ministry of Justice will be able to resume the legislation procedure after the new government is formed and the legislative competencies are distributed. Therefore it is unlikely that the new amendments will come into force earlier than Q3 2018.
Ireland  7.06.2018  n/a
Italy 17.05.2018 At the moment the Scheme is under consideration by the relevant Commission and the Italian Data Protection Authority ("DPA").
According to unofficial information, the Scheme will be approved by the end of May and will enter into force on May 25, as set out by the section 28 of the Scheme, or at the latest at the time of its approval.
Netherlands 17.05.2018 The proposal was adopted by the House of Representatives on 13 March 2018. The Senate (Committee of Justice and Security) adopted the final report on 24 April 2018.

The Act was adopted as a formality on May 15, 2018.

In discussions in Parliament it was considered that further area-specific data protection rules could be introduced at a later stage.
Poland 16.05.2018 The PDPA becomes law on 25 May 2018. It is uncertain when ASA will become the law, it is highly possible that it happens in the autumn 2018.
Spain 16.05.2018 The approval and enactment of the Spanish Data Protection Act was expected before the 25th May. However, the draft bill is now in the phase where all political groups are able to propose amendments to the bill. The political parties have suggested at least 369 amendments to this draft bill. We are aware that the Spanish Data Protection Agency has declared that the draft bill will not enter into force before the 25th May.

The following steps required for the approval of the Spanish Data Protection Draft Bill will be:

1. Once the amendments are presented, the Commission will take a final decision. This final decision will be sent to the Parliament to be debated and approved by absolute majority.

2. Once the draft bill obtains the absolute majority of the Parliament, the Senate will have to approve the draft bill by majority.
Sweden 22.05.2018 The new Data Protection Act will enter into force on 25 May 2018.
UK 23.05.2018 25 May 2018