The EU General Data Protection Regulation (GDPR), which will start to apply as of 25 May 2018, allows EU Member States to enact national data protection laws to supplement the GDPR thereby potentially impacting the intended EU-wide harmonization of data protection law through the GDPR.
Germany was the first country to enact such a (complex) law, making ample use of the GDPR opener clauses. Other countries are in the process of drafting, and consulting on, new local data protection laws with new laws being expected over the next 12 months.
Any business looking to bring their data protection practices in line with the GDPR will need to understand and analyse the local laws supplementing the GDPR - a time consuming and difficult task. In order to help businesses with this task, Baker McKenzie offers the GDPR National Legislation Survey, which captures the status quo on national data protection law developments at the end of June 2017. We will update it regularly to reflect new developments.
You can access our GDPR National Legislation Survey here.