Since May 25, 2018 the European General Data Protection Regulation 2016/679 has been implemented and therefore came into effect. It aims to protect the rights and freedoms of persons with respect to the processing of personal data by establishing guidelines determining when the processing is lawful. The guidelines mainly relate to: The quality of the data; the legitimacy of the processing; the processing of special categories of data; information to be given to the data subject; the data subject's right of access to data; the right to object to the processing of data; the confidentiality and security of processing; and the notification of the processing to a supervisory authority.