Just over one year after the entry into application of the General Data Protection Regulation, the European Commission has published today a report looking at the impact of the EU data protection rules, and how implementation can be improved further. The report concludes that most Member States have set up the necessary legal framework, and that the new system strengthening the enforcement of the data protection rules is falling into place. Businesses are developing a compliance culture, while citizens are becoming more aware of their rights. At the same time, convergence towards high data protection standards is progressing at international level. Frans Timmermans, First Vice-President of the European Commission, said: “The European Union strives to stay at the forefront of the protection of personal rights in the digital transformation while seizing the many opportunities it offers for jobs and innovation. Data is becoming an invaluable element for a booming digital economy and is playing an increasingly vital role in developing innovative systems and machine learning. It is essential for us to shape the global field for the development of the technological revolution and for its proper use in full respect of individual rights.” Věra Jourová, Commissioner for Justice, Consumers and Gender Equality added: “The General Data Protection Regulation is bearing fruit. It equips Europeans with strong tools to address the challenges of digitalisation and puts them in control of their personal data. It gives businesses opportunities to make the most of the digital revolution, while ensuring people’s trust in it. Beyond Europe, it opens up possibilities for digital diplomacy to promote data flows based on high standards between countries that share EU values. But work needs to continue for the new data protection regime to become fully operational and effective.” The Commission’s communication also sets out concrete steps to further strengthen these rules and their application.