The list of EU regulations and directives below relates to data protection and privacy in various ways, with some of them being specifically designed to protect personal data while others are more general regulations that indirectly affect data protection and privacy. The following are some examples:
- General Data Protection Regulation (GDPR) - This is the most significant EU regulation on data protection and privacy. It applies to all organizations that process personal data of EU citizens, regardless of where they are located. It sets out strict requirements for how personal data should be collected, processed, and protected.
- ePrivacy Regulation - This regulation is designed to complement the GDPR by providing specific rules on the use of electronic communications, such as emails and instant messaging, and protecting the confidentiality of such communications.
- Directive on Security of Network and Information Systems (NIS Directive) - This directive aims to improve the security of network and information systems across the EU, including those used for processing personal data.
- Regulation on Privacy and Electronic Communications (ePrivacy Directive) - This directive sets out specific rules on the use of cookies, direct marketing, and other electronic communication tools, with the aim of protecting the privacy of users.
- Regulation on Consumer Protection Cooperation - This regulation is designed to protect consumers from unfair commercial practices, including those related to the processing of their personal data.
- Regulation on European Standardisation - This regulation establishes a common framework for standardization in the EU, which indirectly affects the protection of personal data by ensuring that standards used in products and services meet the necessary data protection requirements.
- Directive on Criminal Measures Aiming at Ensuring the Enforcement of Intellectual Property Rights - This directive includes provisions on the use of personal data in the enforcement of intellectual property rights, which must comply with data protection rules.
- Directive on the Protection of Trade Secrets - This directive provides specific rules on the protection of confidential business information, which can include personal data.
- Regulation on Free Flow of Non-Personal Data - This regulation aims to promote the free flow of non-personal data within the EU, while ensuring the protection of personal data.
- Directive on the Accessibility of Public Sector Bodies' Websites and Mobile Applications - This directive requires public sector bodies to make their websites and mobile applications accessible to all users, including those with disabilities, which indirectly affects data protection and privacy by ensuring that personal data is accessible in a safe and secure way.
- Directive on Copyright in the Digital Single Market - This directive includes provisions on the protection of personal data in the context of online copyright enforcement.
- Regulation on Online Portals and Search Engines - This regulation includes provisions on the protection of personal data in the context of online search engines and online platforms.
- Directive on Security of Gas Supply - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to gas supply, including personal data of consumers.
- Directive on Security of Electricity Supply - similar to the above, this directive focuses on ensuring the secure transmission and storage of data related to electricity supply, including personal data of consumers.
- Directive on the Deployment of Alternative Fuels Infrastructure - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to the deployment and use of alternative fuels infrastructure, including personal data of consumers.
- Directive on the Energy Performance of Buildings - this directive includes provisions related to the processing of personal data in relation to energy performance certificates, as well as the sharing of energy consumption data with relevant authorities.
- Regulation on the Governance of the Energy Union and Climate Action - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to the governance of the energy union and climate action, including personal data of individuals and organizations.
- Directive on Common Rules for the Internal Market for Electricity - similar to the above, this directive focuses on ensuring the secure transmission and storage of data related to the internal market for electricity, including personal data of consumers.
- Regulation on the European Union Agency for Cybersecurity - this regulation establishes the EU Agency for Cybersecurity, which has a mandate to promote and improve cybersecurity across the EU, including in relation to data protection and privacy.
- Directive on Administrative Cooperation in the Field of Taxation - this directive includes provisions related to the exchange of information between EU member states in relation to tax matters, including the processing and protection of personal data.
- Regulation on Interchange Fees for Card-Based Payment Transactions - this regulation regulates interchange fees for card-based payment transactions, including provisions related to data protection and privacy.
- Directive on the Promotion of the Use of Energy from Renewable Sources - similar to other directives related to energy, this directive includes provisions related to the processing of personal data in relation to the promotion of the use of energy from renewable sources.
- Regulation on the Governance of the Single Market - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to the governance of the EU single market, including personal data of individuals and organizations.
- Regulation on the Establishment of a European Union Agency for Cybersecurity - this regulation is the legal basis for the establishment of the EU Agency for Cybersecurity, which has a mandate to promote and improve cybersecurity across the EU, including in relation to data protection and privacy.
- Regulation on the Establishment of a Framework to Facilitate Sustainable Investment - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to sustainable investment, including personal data of investors and other stakeholders.
- Directive on the Interoperability of Electronic Road Toll Systems - this directive includes provisions related to the processing and protection of personal data in relation to electronic road toll systems.
- Regulation on the Establishment of a European Union Agency for Asylum - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to the processing of asylum applications, including personal data of applicants.
- Regulation on the Governance of the Digital Single Market - relates to data protection and privacy in terms of ensuring the secure transmission and storage of data related to the governance of the digital single market, including personal data of individuals and organizations.
- Directive on the Promotion of Clean and Energy-Efficient Road Transport Vehicles - includes provisions related to the processing and protection of personal data in relation to clean and energy-efficient road transport vehicles.
- Regulation on the Establishment of a European Union Agency for Law Enforcement Training - relates to data protection and privacy in terms of ensuring the secure transmission and
- Regulation on the Monitoring, Reporting and Verification of Carbon Dioxide Emissions from Maritime Transport: This regulation aims to reduce greenhouse gas emissions from maritime transport, which can also indirectly contribute to the protection of personal data and privacy by mitigating the potential impacts of climate change on individuals' lives and communities.
- Directive on the Safety of Offshore Oil and Gas Operations: This directive establishes minimum requirements for the safety of offshore oil and gas operations in EU waters, including measures to prevent major accidents and limit their consequences. This can indirectly protect personal data and privacy by reducing the risk of harm to individuals and communities in the event of an offshore accident.
- Regulation on the Establishment of a European Union Agency for Railways: This regulation establishes a single European railway agency to ensure the interoperability and safety of the EU rail system. This can indirectly protect personal data and privacy by ensuring the safe and secure transportation of individuals and their personal information.
- Directive on Certain Aspects of Mediation in Civil and Commercial Matters: This directive aims to promote the use of mediation as an alternative dispute resolution method in civil and commercial matters. This can indirectly protect personal data and privacy by providing a more private and confidential way for individuals and businesses to resolve disputes, without the need for public court proceedings.
- Regulation on the Establishment of a European Union Agency for the Space Programme: This regulation establishes a single European space agency to coordinate and promote the EU's activities in space, including satellite communications and Earth observation. This can indirectly protect personal data and privacy by providing improved space-based services, such as weather forecasting and disaster response, that can help to protect individuals and communities.
- Regulation on the Protection of Natural Persons with Regard to the Processing of Personal Data by Competent Authorities for the Purposes of Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties, and on the Free Movement of Such Data: This regulation sets out rules for the processing of personal data by competent authorities for law enforcement purposes, including the protection of individuals' privacy and data protection rights.
- Directive on the Protection of Persons Reporting on Breaches of Union Law: This directive aims to protect individuals who report breaches of EU law from retaliation, including the protection of their personal data and privacy.
- Regulation on the Import of Cultural Goods: This regulation aims to prevent the illicit trade in cultural goods, which can include objects of artistic, historical, or archaeological value. This can indirectly protect personal data and privacy by preserving the cultural heritage of individuals and communities.
- Regulation on the Registration, Evaluation, Authorisation and Restriction of Chemicals: This regulation aims to ensure the safe use of chemicals and protect human health and the environment. This can indirectly protect personal data and privacy by reducing the potential harm that exposure to hazardous chemicals can cause to individuals.
- Regulation on the Mutual Recognition of Goods Lawfully Marketed in Another Member State: This regulation establishes the principle of mutual recognition, which allows products lawfully marketed in one EU country to be sold in another without the need for additional testing or authorization. This can indirectly protect personal data and privacy by ensuring that products sold in different EU countries meet the same safety and quality standards.
- Regulation on the Protection of the Union's Budget in Case of Generalised Deficiency of the Rule of Law in the Member States: This regulation aims to protect the EU's financial interests by establishing a mechanism to suspend or reduce EU funding to member states that fail to uphold the rule of law. This can indirectly protect personal data and privacy by ensuring that EU funds are not used to support activities that may pose a threat to individuals' privacy or data protection rights.
- Directive on Whistleblower Protection: This directive aims to provide greater protection for individuals who report breaches of EU law or other
- Regulation on the Establishment of the European Public Prosecutor's Office - The regulation aims to establish a European Public Prosecutor's Office (EPPO) to investigate and prosecute crimes affecting the financial interests of the European Union. This includes crimes related to data protection and privacy.
- Regulation on European Crowdfunding Service Providers for Business - This regulation sets out rules for crowdfunding service providers in the European Union to ensure investor protection and access to finance for small businesses. The regulation includes provisions related to data protection and privacy, as crowdfunding platforms may collect and process personal data of investors and borrowers.
- Directive on Transparent and Predictable Working Conditions - The directive establishes minimum rights for workers, including the right to transparent and predictable working conditions. This includes the protection of personal data of employees, as employers may collect and process personal data for the purpose of managing employment contracts.
- Regulation on the Establishment of a Framework for Screening of Foreign Direct Investments into the European Union - The regulation establishes a framework for the screening of foreign direct investments into the European Union to protect critical infrastructure, technologies and sensitive information. This includes the protection of personal data that may be included in investments.
- Directive on the Protection of Persons with Regard to the Processing of Personal Data by Competent Authorities for the Purposes of Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties, and on the Free Movement of Such Data - The directive aims to protect personal data processed by competent authorities for the purposes of preventing, investigating, detecting or prosecuting criminal offences or executing criminal penalties, while ensuring the free movement of such data within the European Union.
- Regulation on the European Globalisation Adjustment Fund - The regulation establishes the European Globalisation Adjustment Fund to provide support to workers affected by major structural changes in world trade patterns. This includes the protection of personal data of workers who may receive support from the fund.
- Directive on Work-Life Balance for Parents and Carers - The directive aims to improve work-life balance for parents and carers by establishing minimum rights for parental leave, flexible working arrangements, and carers' leave. This includes provisions related to the protection of personal data of employees who may request these benefits.
- Directive on Copyright and Related Rights in the Digital Single Market - The directive establishes new copyright rules in the digital age, including provisions related to the use of copyrighted works for the purpose of text and data mining. This includes the protection of personal data that may be processed in the context of text and data mining activities.
- Regulation on the Establishment of a Single Digital Gateway - The regulation aims to facilitate online access to information, procedures and assistance services across the European Union. This includes provisions related to the protection of personal data that may be collected and processed through the digital gateway.
- Regulation on the Implementation and Functioning of the .eu Top-Level Domain - The regulation establishes rules for the implementation and functioning of the .eu top-level domain, including provisions related to the protection of personal data of domain name holders.
- Directive on the Promotion of the Use of Energy from Renewable Sources - The directive aims to increase the use of energy from renewable sources to reduce greenhouse gas emissions and increase energy security. This includes provisions related to the protection of personal data that may be collected and processed in the context of renewable energy projects.
- Directive on the Quality of Water Intended for Human Consumption - The directive establishes minimum requirements for the quality of water intended for human consumption, including provisions related to the protection of personal data of water supply operators and consumers.
- Regulation on European Union Cybersecurity Certification - The regulation aims to establish a European cybersecurity certification framework to improve the security of digital products and services in the European Union. This includes provisions related to the protection of personal data that may be processed in the context of cybersecurity certification.
- Regulation on European Union Cybersecurity Certification - This regulation establishes a framework for a European Union-wide cybersecurity certification scheme, which aims to enhance trust in digital products, services, and processes. It includes requirements for the protection of personal data, and data protection and privacy are central to the certification process.
- Regulation on the European Union Intellectual Property Office - This regulation establishes the European Union Intellectual Property Office (EUIPO), which is responsible for the registration and protection of EU trademarks and designs. The EUIPO is also responsible for the management of the EU Intellectual Property Rights Observatory, which provides information and analysis on intellectual property rights in the EU. Data protection and privacy are important considerations in the registration and management of trademarks and designs, as well as in the collection and analysis of data by the Observatory.
- Regulation on the Protection of Geographical Indications and Designations of Origin for Agricultural Products and Foodstuffs - This regulation establishes a framework for the protection of geographical indications and designations of origin for agricultural products and foodstuffs in the EU. The regulation includes provisions on the protection of personal data and the processing of such data in the context of the registration and protection of geographical indications and designations of origin.
- Regulation on the Supply Chain Due Diligence Obligations for Union Importers of Tin, Tantalum and Tungsten, their Ores, and Gold Originating from Conflict-Affected and High-Risk Areas - This regulation establishes due diligence obligations for EU importers of certain minerals and metals that originate from conflict-affected and high-risk areas. The regulation includes provisions on the protection of personal data, particularly in the context of reporting requirements related to due diligence.
- Regulation on the Establishment of a European Union Agency for the Cooperation of Energy Regulators - This regulation establishes the Agency for the Cooperation of Energy Regulators (ACER), which aims to promote the cooperation and coordination of energy regulators in the EU. Data protection and privacy are important considerations in the work of ACER, particularly in relation to the exchange of information and the processing of personal data.
- Directive on the Restriction of Hazardous Substances in Electrical and Electronic Equipment - This directive restricts the use of certain hazardous substances in electrical and electronic equipment in the EU. The directive includes provisions on the protection of personal data in the context of the conformity assessment procedures and reporting requirements established by the directive.
- Directive on the Portability of Online Content Services - This directive establishes rules for the cross-border portability of online content services in the EU. The directive includes provisions on the protection of personal data, particularly in relation to the verification of the subscriber's Member State of residence and the processing of personal data for that purpose.
- Regulation on European Long-term Investment Funds - This regulation establishes a framework for the creation and management of European Long-term Investment Funds (ELTIFs), which are designed to encourage long-term investment in the EU. The regulation includes provisions on the protection of personal data, particularly in relation to the collection and processing of personal data by ELTIFs and their managers.
- Directive on Alternative Investment Fund Managers - This directive regulates the management of alternative investment funds in the EU. The directive includes provisions on the protection of personal data in the context of the authorization and supervision of alternative investment fund managers.
- Directive on Access to the Activity of Credit Institutions and the Prudential Supervision of Credit Institutions and Investment Firms - This directive establishes rules for the access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms in the EU. The directive includes provisions on the protection of personal data, particularly in relation to the exchange of information between competent authorities and the processing of personal data in the context of the authorization and supervision of credit institutions and investment
- The Directive on Payment Services relates to Data protection and Privacy as it includes provisions on the protection of personal data in relation to the processing of payment transactions.
- The Directive on Markets in Financial Instruments also has implications for Data protection and Privacy as it requires financial institutions to implement appropriate safeguards to protect personal data in the context of financial transactions.
- The Directive on the Taxation of Energy Products and Electricity does not directly relate to Data protection and Privacy.
- The Directive on the Restructuring and Resolution of Credit Institutions and Investment Firms also has implications for Data protection and Privacy as it includes provisions on the protection of personal data in the context of financial restructuring and resolution procedures.
- The Regulation on the Electronic Identification and Trust Services for Electronic Transactions in the Internal Market relates to Data protection and Privacy as it establishes a framework for the use of electronic signatures and other forms of electronic identification, which must comply with relevant data protection laws.
- The Regulation on the Procedures for Granting and Withdrawing Uniform Format Residence Permits for Third-Country Nationals also has implications for Data protection and Privacy as it requires the processing of personal data in the context of immigration and residency.
- The Directive on Insurance Distribution also has implications for Data protection and Privacy as it includes provisions on the protection of personal data in the context of insurance transactions.
- The Regulation on Organic Production and Labelling of Organic Products does not directly relate to Data protection and Privacy.
- The Directive on Alternative Dispute Resolution for Consumer Disputes also has implications for Data protection and Privacy as it includes provisions on the protection of personal data in the context of dispute resolution.
- The Regulation on the Governance of the Energy Union and Climate Action does not directly relate to Data protection and Privacy.
- The Directive on Cross-Border Mergers of Limited Liability Companies also has implications for Data protection and Privacy as it requires the processing of personal data in the context of business mergers and acquisitions.
- The Directive on the Energy Performance of Buildings also has implications for Data protection and Privacy as it includes provisions on the use of personal data in the context of building energy performance assessments.
- The Regulation on the Agency for the Cooperation of Energy Regulators does not directly relate to Data protection and Privacy.
- The Regulation on a Common European Sales Law does not directly relate to Data protection and Privacy.
- The Regulation on the European Maritime and Fisheries Fund does not directly relate to Data protection and Privacy.
- The Regulation on the European Regional Development Fund does not directly relate to Data protection and Privacy.