New data protection regulation impact on European Institutions

Abstract

Purpose of the paper is: a) to briefly present the main changes introduced by the New Data Protection Regulation applicable to all EU Institutions and bodies, b) to present the main actions undertaken in order to ensure compliance with the legal framework and c) to describe some differences regarding the application of the legal framework in comparison with private entities and public authorities in the EU Member States. European Institutions and Bodies were under extreme time pressure in order to implement compliance actions with their data protection Regulation because there was no transition period between the adoption and the entering into force of the new legal framework. The new “accountability” model enhances the responsibilities of the institutions and requires a change of data protection culture not only for the institutions but also for the Supervisor. On the other hand, European Institutions, because of their robust data protection regime can substantially contribute to the development and establishment of future “Best Data Protection Practices”.