Sent to subscribers in May 2017
With the European Union and the European Economic Area (EU/EEA) in a period of transition, there is much activity but still insufficient tangible results. EU/EEA Member States are both attempting to fathom the changes that the adoption of the General Data Protection Regulation (GDPR) will bring to the region as a whole, to understand how their own countries will or should implement the new rules, and whether and in what ways they can or should supplement the basic provisions of the GDPR when that is possible. Thus, numerous documents, decisions, guidelines, and the like are still in gestation or being revised and reshaped. On the other hand, some of the Member States, such as France, Germany, and the Netherlands, have made substantial progress and have been especially active.
The next supplement will bring updates on the final versions of several guidelines drafted by the Article 29 Working Party. These guidelines are about to be adopted in their final forms, but their final texts are not public as of press time. These guidelines provide some clarity on the interpretation of certain provisions of the GDPR.
Elsewhere, some countries are preparing major changes. This is the case, for example, for China and Turkey, but the changes came in too close to press time, and the details of their application are still too scarce for an analysis to be included in this supplement. A more detailed report will be published in the next supplement.