Privacy Laws & Business UK Report
Member States’ Derogations Undermine the GDPR
May 2016
The EU’s General Data Protection Regulation (GDPR) was adopted by the European Parliament on 14 April 2016. The final step for formal adoption was publication of the GDPR in the Official Journal of the EU on 4 May which means that the starting date for the two-year implementation period will be 24 May 2016. Companies and data protection authorities (DPAs) will then have just 24 months from this date to implement the new requirements under the GDPR.
This article was originally published in Privacy Laws & Business UK Report, May 2016, www.privacylaws.com.
Contacts
Capabilities
Suggested News & Insights
From Tallahassee to Phoenix: States Move to Enforce National Security Limits on Access to Americans’ Sensitive Personal DataMarch 5, 2026Generative AI and Privilege: Practical Lessons from Two Early Decisions and What Comes NextMarch 3, 2026Congress Considers Right to Repair Bill for Vehicle OwnersMarch 2, 2026Geopolitics and Cybersecurity: Japan and the UK Announce Strategic Cyber Partnership Among Growing Global Focus on Privacy and Cyber Risks Posed by Foreign ActorsFebruary 27, 2026Generative AI and Privilege: Practical Lessons from Two Early Decisions and What Comes NextFebruary 27, 2026Sidley Represents Precision NeuroMed in Its Strategic Partnership With Brainlab SEFebruary 27, 2026
- Stay Up To DateSubscribe to Sidley Publications
- Follow Sidley on Social MediaSocial Media Directory

