Which of the following adopted a law on data protection and privacy for its citizens known as 'General Data Protection Regulation' in April 2016 and started implementation of it from 25th May, 2018?
Answer & explanation
Answer: (c) The European Union
The European Union adopted the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, on 27 April 2016, and it has applied since 25 May 2018. It is an EU-wide law, so it is not a law of Australia, Canada or the USA.
- ✓ (c) The European Parliament and the Council of the EU adopted Regulation (EU) 2016/679 on 27 April 2016. It entered into force on 24 May 2016 and has applied since 25 May 2018.
- ✗ (a) Australia is not the source of the GDPR; the regulation is EU law.
- ✗ (b) Canada did not adopt the GDPR; the regulation is EU law.
- ✗ (d) The USA did not adopt the GDPR; the regulation is EU law.
Remember · GDPR = EU Regulation 2016/679: adopted 27 April 2016, in force 24 May 2016, applicable from 25 May 2018.
Sources
- EUR-Lex (European Union), the general data protection regulation applies in all Member States from 25 May 2018 ↗ “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC”
- European Commission, Legal framework of EU data protection ↗ “The Regulation entered into force on 24 May 2016 and applies since 25 May 2018.”
Question and answer: UPSC's official GS Paper I (2019, Series A) — paper ↗ · answer key ↗. Explanation: Minimalist IAS, checked 30 Sept 2026 (how we verify). ·