GDPR two years on…the story so far

10 July 2020

Two years after its introduction, the European Commission last week published an evaluation report on the General Data Protection Regulation (GDPR).

This comprehensive report sets out the impact of the regulation, which is designed to provide individuals with the right to control the processing and movement of their own personal data.

Overall, the review finds that people are more empowered and aware of their rights since the implementation of the GDPR, although it also acknowledges that there is work still to do. Key findings include:

  1. The rules on data protection are fit for the digital age
  2. Data protection authorities are making use of their stronger corrective powers
  3. Data protection authorities are working together in the context of the European Data Protection Board (EDPB)
  4. Data protection authorities are issuing advice and guidelines on key aspects of the regulation and emerging topics
  5. Harnessing the full potential of international data transfers is yielding some significant results
  6. Promoting international cooperation is ongoing, fostering a more global culture of respect for privacy

The Commission has also published a communication setting out how it plans to align EU law with the Law Enforcement Directive. This alignment will clarify issues such as the purposes of personal data processing by competent authorities, and what types of data may be subject to such processing.

The Commission will now publish an evaluation and review of the GDPR every four years. You can read the full report here.

Receive our monthly newsletter

About the Author

Magnus Boyd


Magnus protects individual and corporate reputations by helping clients to manage unwanted media attention. He also advises on information security and helps clients manage the risks to reputation that arise in the event of data loss.

+1 646 934 6219
Our 24 hour number
+1 646 934 6219
Legal information

© 2020 Schillings International LLP. SCHILLINGS is a trading name of Schillings International LLP and Schillings International (USA) LLP.

Schillings International LLP is a limited liability partnership registered in England and Wales with registration number OC398731. A list of members of Schillings International LLP is available for inspection at our registered office 12 Arthur Street, London, EC4R 9AB. Schillings International LLP is an Alternative Business Structure regulated and authorised by the Solicitors Regulation Authority.

Schillings International (USA) LLP is a registered limited liability partnership organised and existing under the laws of the State of Delaware, United States of America, whose principal place of business is at One World Trade Center, Suite 8500, New York, NY 10007. Our New York based attorneys are registered as a foreign legal consultant in the State of New York.