It is now clear that the proposed EU data protection framework will be revised, and that it will be in the form of a Regulation – the General Data Protection Regulation. The GDPR will replace the current Directive and will be directly applicable in all Member States without the need for implementing national legislation. It is currently under discussion in “trilogue” by the European Commission, the Parliament and the Council as they try to agree on a final text. Each institution has previously published its own form of the text so we have a fair idea of which points might be harder to agree.