The new EU Data Protection Regulation

The note identifies a number of points that businesses should be considering whilst the actual content of the Regulation is being finalised, and represents our current view on a selection of items that will make it into the final text. We have deliberately omitted coverage of those areas which remain the subject of particularly heavy lobbying, notably the right to be forgotten, any impact on social media and potential changes in consent requirements, as the final position remains too uncertain. 

We will be commenting further as the final text becomes clearer, and bearing in mind that the new Regulation does not come into force until at least 2015, only seek to highlight some of the practical steps that you should be taking now to prepare for the inevitable changes in the data privacy regime.