GDPR incorporated into the EEA Agreement
The General Data Protection Regulation (GDPR) was among 69 EU legal acts incorporated into the EEA Agreement by the EEA Joint Committee in Brussels on 6 July 2018. The regulation will enter into force in all three EEA EFTA States mid-July.
In addition to the adoption of a Joint Committee Decision (JCD) incorporating the GDPR, national legislation in each EEA EFTA State must be amended in accordance with the GDPR before the act can take effect in the EEA Agreement. Once all three states notify the conclusion of the parliamentary processes (fulfilment of constitutional requirements), the GDPR becomes applicable throughout the EEA.