Currently there is no harmonized EU-wide regulation on data protection. There is a general directive (EC Directive 95/46), which is implemented at individual EU member state level and consequently has many national flavours. From May 25, 2018 this will be superseded by the EU General Data Protection Regulation (GDPR).