Personal data protection: processing and free movement of data (General Data Protection Regulation)

This file is the General Data Protection Regulation on the processing and free movement of personal data; under the ordinary legislative procedure Parliament and the Council decide together and the result is binding EU law. It was handled by committees including Civil Liberties, Justice and Home Affairs and Legal Affairs, under protection of privacy and data protection. The tabled amendments address data protection impact assessments and when SMEs must perform them, the principles of purpose limitation, accuracy and storage limitation, lawful bases including consent, contract performance and legitimate interests, special categories such as health and sex life, processing for network and information security, and pseudonymisation and anonymisation. It shares data protection with additional procedural rules on enforcement of the Regulation.