GDPR enforcement timeline
Every key GDPR date — entry into force, transposition deadlines, phased provisions, and compliance milestones. 3 milestones tracked, sourced directly from EUR-Lex.
When does GDPR take effect?
GDPR (Regulation (EU) 2016/679) has 3 key enforcement milestones. 3 milestones have already passed; 0 milestones are upcoming.
Source: Regulation (EU) 2016/679 via EuroComply EU Regulation Deadlines dataset
Total milestones
3
In force
3
Upcoming
0
GDPR — complete milestone timeline
Regulation (EU) 2016/679 · Official text
GDPR enters into full application
General Data Protection Regulation becomes fully applicable across all EU Member States, replacing Directive 95/46/EC. Controllers and processors must comply with all provisions including lawful basis, data subject rights, DPO appointment where required, and breach notification.
Applies to: all controllers and processors handling personal data of EU data subjects
Penalty: up to €20M or 4% of worldwide annual turnover
Schrems II: EU-US Privacy Shield invalidated by CJEU
The Court of Justice of the EU (Case C-311/18) invalidated the EU-US Privacy Shield adequacy decision. Organisations relying on Privacy Shield for US data transfers had to immediately adopt alternative transfer mechanisms (SCCs with TIA, BCRs, or Article 49 derogations).
Applies to: all organisations transferring personal data from EU to the United States
Penalty: up to €20M or 4% of worldwide annual turnover
EU-US Data Privacy Framework adequacy decision adopted
European Commission adopted adequacy decision for the EU-US Data Privacy Framework (DPF), replacing Privacy Shield. US organisations certified under DPF can receive EU personal data without additional transfer safeguards.
Applies to: organisations transferring personal data from EU to US-certified DPF participants
Penalty: up to €20M or 4% of worldwide annual turnover if transfers lack valid basis
Embed a countdown widget
Add a live GDPR deadline countdown to your website or intranet with a single script tag.
Browse embed widgets →Does GDPR apply to your business before the deadline?
Find out in 2 minutes with our free regulation checker.
Check scope — freeFor informational purposes only. This is not legal advice — consult qualified legal counsel for advice specific to your situation. Dates reflect official EUR-Lex sources; verify with your national competent authority for jurisdiction-specific transposition dates.
Last updated: