History of GDPR
How the European Union created the world's most influential data protection law.
🎯 Learning Objectives
- ▸ Understand why the 1995 Directive became outdated
- ▸ Analyze the legislative process behind the GDPR
- ▸ Understand the global impact of the GDPR
The Pre-GDPR Era
Before GDPR, the EU relied on the 1995 Data Protection Directive. The internet exploded in the early 2000s, making the 1995 rules inadequate. Companies like Facebook and Google were collecting data at unprecedented scales, crossing borders effortlessly.
The GDPR Revolution
Adopted in 2016 and enforced in 2018, the GDPR replaced the Directive. It was a "Regulation" (not a Directive), meaning it applied directly to all EU member states without needing local laws.
The GDPR introduced the concept of "privacy by design," gave individuals sweeping rights (like the right to be forgotten), and put the fear of God into companies with fines of up to 4% of global turnover or €20 million.
📖 Glossary
- GDPR
- General Data Protection Regulation, the EU's comprehensive data privacy law effective from 2018.
- Directive vs. Regulation
- A Directive sets goals for member states to implement locally, while a Regulation is directly binding law across all member states.
🔑 Key Takeaways
- GDPR replaced the Data Protection Directive (1995).
- It was designed to unify data protection across the EU.
- It introduced massive fines and extraterritorial scope.
📚 Further Reading
- GDPR Full Text — European Union (2016)
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...