Rules for EU institutions' processing of personal data

Briefing 12-09-2018

In the context of the comprehensive reform of the EU's legal framework for data protection, the Commission tabled a proposal in January 2017 for a 'regulation on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and the free movement of such data' and repealing the existing one (Regulation No 45/2001). The aim is to align it to the 2016 General Data Protection Regulation (GDPR) that has been fully applicable since 25 May 2018. Interinstitutional trilogue meetings, in which debate focused on also applying the regulation to operational data of EU bodies carrying out law enforcement activities, brought an agreement between the co-legislators in May. The compromise text is due to be voted by the Parliament in the September plenary session. Third edition. The 'EU Legislation in Progress' briefings are updated at key stages throughout the legislative procedure.