articleInformation & Communications Technology LawJan 2, 2019HYBRID OA

The European Union general data protection regulation: what it is and what it means

CJChris Jay HoofnagleBVBart van der SlootFZFrederik Zuiderveen Borgesius

University of California, Berkeley · Tilburg University · +2 more institutions

Indexed inarxivcrossref

Abstract

This paper introduces the strategic approach to regulating personal data and the normative foundations of the European Union’s General Data Protection Regulation (‘GDPR’). We explain the genesis of the GDPR, which is best understood as an extension and refinement of existing requirements imposed by the 1995 Data Protection Directive; describe the GDPR’s approach and provisions; and make predictions about the GDPR’s implications. We also highlight where the GDPR takes a different approach than U.S. privacy law. The GDPR is the most consequential regulatory development in information policy in a generation. The GDPR brings personal data into a detailed regulatory regime, that will influence personal data usage…

Citation impact

705
total citations
FWCI
83.47
Percentile
100%
References
0
Citations per year

Authors

3

Topics & keywords

Topics
Keywords
  • European union
  • General Data Protection Regulation
  • Data Protection Act 1998
  • Political science
  • Data Protection Directive
  • Business
  • International trade
  • Computer science
UN Sustainable Development Goals
  • Decent work and economic growth
No related works found for this paper.

Funding