As a result of the progressive digitalization and the companying simplification of transformation, administration, evaluation and transmission of data, the data privacy becomes increasingly relevant. New risks, abuse possibilities and consequently more challenges, in context with the protection of personal data, arise. To meet this changes the compulsory regulations for the companies have to be adapted to the changing conditions.  

On the 27th of April 2016 the General Data Protection Regulation (GDPR) came into effect. It  regulates the data protection and privacy for all companies operating in the European Union. Every private company and public places had two years time to implement this rules. In case of violation, fines up to 20 milion euro or 4% of the worldwide annual turnover of the previous financial year, depending which sum is greater, can be imposed. The regulation is formulated vague and doesn`t consist of concrete suggestionshow to implement the legal requirements, which leads to difficulties for the companies.   

One group that dealt with this problem was the Article 29 Working Party, which existed since 1995. It acted independent from the EU institutions and had an advisory function. Their statements about data protection were not binding. After the General Data Protection Regulation was decided they published a few Working Papers, in which they provided guidelines for interpretation and implementation of the new rules. When the GDPR was applied the Articel 29 Working Party was replaced by the European Data Protection Committee.