Data Protection in the Internet: A European
Union Perspective
Pedro A. de Miguel Asensio
1 General Data Protection Framework
1.1 Regulation (EU) 2016/679
The general framework on Data Protection in the EU is established in Regulation
(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on
the protection of natural persons with regard to the processing of personal data and
on the free movement of such data, and repealing Directive 95/46/EC (General Data
Protection Regulation or GDPR).
1 Pursuant to Article 99, the Regulation shall apply
from 25 May 2018, and Directive 95/46/EC is repealed with effect from the same
date. The GDPR shares the main objectives and principles of Directive 95/46/EC
2
but establishes a more detailed set of rules which are directly applicable in all
Member States to prevent fragmentation in the implementation of data protection
across the Union and to ensure a uniform high level of protection in all Member
States. In contrast with the mere harmonization of national laws under Directive
95/46/EC, the GDPR establishes a one single set of rules for the Union.
This chapter has been made in the framework of research project DER-2015-64063-P (MINECOFEDER).
1 OJ L 119, 4.5.2016, p. 1. For an initial general overview of the GDPR, see De Hert and
Papakonstantinou (2016), Härting (2016), Paal and Pauly (2017), and Albrecht and Jotzo (2017).
2 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the
protection of individuals with regard to the processing of personal data and on the free movement of
such data (OJ L 281, 23.11.1995, p. 31).
P. A. de Miguel Asensio (*)
Complutense University of Madrid, Madrid, Spain
e-mail: pdmigue@der.ucm.es
© Springer Nature Switzerland AG 2020
D. Moura Vicente, S. de Vasconcelos Casimiro (eds.), Data Protection in the
Internet, Ius Comparatum – Global Studies in Comparative Law 38,
https://doi.org/10.1007/978-3-030-28049-9_18
457
Union Perspective
Pedro A. de Miguel Asensio
1 General Data Protection Framework
1.1 Regulation (EU) 2016/679
The general framework on Data Protection in the EU is established in Regulation
(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on
the protection of natural persons with regard to the processing of personal data and
on the free movement of such data, and repealing Directive 95/46/EC (General Data
Protection Regulation or GDPR).
1 Pursuant to Article 99, the Regulation shall apply
from 25 May 2018, and Directive 95/46/EC is repealed with effect from the same
date. The GDPR shares the main objectives and principles of Directive 95/46/EC
2
but establishes a more detailed set of rules which are directly applicable in all
Member States to prevent fragmentation in the implementation of data protection
across the Union and to ensure a uniform high level of protection in all Member
States. In contrast with the mere harmonization of national laws under Directive
95/46/EC, the GDPR establishes a one single set of rules for the Union.
This chapter has been made in the framework of research project DER-2015-64063-P (MINECOFEDER).
1 OJ L 119, 4.5.2016, p. 1. For an initial general overview of the GDPR, see De Hert and
Papakonstantinou (2016), Härting (2016), Paal and Pauly (2017), and Albrecht and Jotzo (2017).
2 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the
protection of individuals with regard to the processing of personal data and on the free movement of
such data (OJ L 281, 23.11.1995, p. 31).
P. A. de Miguel Asensio (*)
Complutense University of Madrid, Madrid, Spain
e-mail: pdmigue@der.ucm.es
© Springer Nature Switzerland AG 2020
D. Moura Vicente, S. de Vasconcelos Casimiro (eds.), Data Protection in the
Internet, Ius Comparatum – Global Studies in Comparative Law 38,
https://doi.org/10.1007/978-3-030-28049-9_18
457