The data protection reform package includes the General Data Protection Regulation and the data Protection Directive for Police and Criminal Justice Authorities. It updates and replaces the current Data protection rules that are based on the 1995 Data Protection Directive and the 2008 Framework Decision for the police and criminal justice sector

The reform also sets minimum standards on use of data for policing and judicial purposes.

Member States have two years to apply the Data Protection Regulation and to transpose and implement the “Police” Directive. This timeframe gives Member States and companies sufficient time to adapt to the new rules.

The European Commission said: “The new rules will ensure that the fundamental right to personal data protection is guaranteed for all. The General Data Protection Regulation will help stimulate the Digital Single Market in the EU by fostering trust in online services by consumers and legal certainty for businesses based on clear and uniform rules.”

The European Automobile Manufacturers’ Association (ACEA) welcomed the new rules.

“This regulation arguably gives us the most modern data protection regime in the world; one that was conceived explicitly to deal with issues arising with regard to connected products and services,” stated ACEA secretary general Erik Jonnaert.