The EEA EFTA States incorporate the General Data Protection Regulation (GDPR) soon
On 20th of July 2018 the European Data Law will come into effect also in the three EFTA States (Iceland, Norway and Liechtenstein). This has been the result of the incorporation Agreement by the EEA Joint Committee in Brussels on July 6th 2018.
Before the GDPR becomes applicable throughout all three states, each of the states shall notify the agreement by a parliamentary process.
As usual for the EEA Joint Agreements, the EFTA States are obligated to implement the EU Regulation and they are affected by the Jurisdiction of the European Court of Justice (ECJ). The supervisory authority of the EFTA States also participates in the activities of the European Data Protection Board, without having the right to vote and to stand for election as chair or deputy chairs of the board.
Switzerland is not part of this agreement and has its own legal basis for data protection.
