Much has happened since the European Union (EU) General Data
Protection Regulation (GDPR) went into effect on May 25, 2018. Many
EU countries have enacted national legislation to implement and
expand the requirements of the GDPR, while other developments have
directly affected employers and created new obligations regarding
the collection and processing of human resources (HR)
data.
This article, which addresses threshold issues of GDPR
coverage, is the first in a four-part series of articles examining
national legislation, opinions, and guidelines that have been
enacted or promulgated clarifying the GDPR's requirements.
Subsequent articles in the series will cover data protection impact
assessments, claims alleging violations of the GDPR, enforcement
actions, and fines that have been issued.