Fiche 3/54 Part I — General Introduction Beginner Reviewed 2026-08-23

Regulation (EU) 2016/679 & European Historical Context

From Convention 108 (1981) and Directive 95/46/EC to Regulation (EU) 2016/679, European data protection law transitioned from fragmented national regimes to a single, directly applicable rulebook.

Open in interactive reader

⚖️ Binding Regulation 🏛️ European Legal History

Regulation (EU) 2016/679 & European Evolution

⚡ In 30 seconds

The GDPR is the product of four decades of European legal construction: Convention 108 of the Council of Europe (1981) established common principles, followed by Directive 95/46/EC. The failure of the directive model to prevent cross-border regulatory fragmentation led the EU to adopt a single, directly applicable Regulation on 27 April 2016, effective 25 May 2018.

Year	Instrument	Significance & Legal Impact
1981	Convention 108 (Council of Europe)	First legally binding international instrument on automated data processing.
1995	Directive 95/46/EC	Established baseline EU rules, but suffered from 28 differing national transpositions.
2016	Adoption of Regulation 2016/679	Direct applicability, extra-territorial reach, heavy administrative fines up to €20M / 4%.
2018	Entry into application (25 May)	Unified single European enforcement mechanism led by national DPAs and the EDPB.

⚡ Key Takeaways

Direct horizontal applicability in all Member States without national transposing laws.
Substantial strengthening of supervisory authorities through the European Data Protection Board (EDPB).
Preservation of targeted national flexibility clauses (Articles 8, 9(4), 85, 88).

⚠️ Common Pitfall

Ignoring national opening clauses, which allow Member States to enact stricter rules for employment, health, or public records.

🛠️ In Practice

Verify whether your cross-border processing touches areas governed by specific national opening provisions.

⚖️ Official Sources: Art. 99 GDPR · Convention 108+ · Directive 95/46/EC ✓ Legal review: 23 August 2026