The General Data Protection Regulation, Regulation (EU) 2016/679, (the GDPR) represents the most significant development in data protection law for the last 20 years. The GDPR came into force on 24 May 2016, but due to a two-year implementation period, its provisions will only be directly applicable and fully enforceable across all Member States from 25 May 2018. For more information, see Practice Note: EU data protection reform—timeline [Archived]. Once applicable, the GDPR will repeal the Data Protection Directive, Directive 95/46/EC, and replace the Data Protection