The EU General Data Protection Regulation (GDPR) has been in force throughout the European Union (EU) since 25 May 2018. In some cases, it also applies to companies based in Switzerland.

The processing of personal data should serve humanity. The right to the protection of personal data is not an absolute right; it must be considered in relation to its social function and balanced against other fundamental rights in accordance with the principle of proportionality. This Regulation is consistent with all fundamental rights and respects all freedoms and principles recognised by the Charter and enshrined in the European Treaties, in particular respect for private and family life, home and communications, protection of personal data, freedom of thought, conscience and religion, freedom of expression and information, freedom to conduct a business, the right to an effective remedy and to a fair trial, and the diversity of cultures, religions and languages.