It was adopted on 14 April 2016,[2] and after a two-year transition period, becomes enforceable on 25 May 2018.[3] The GDPR replaces the 1995 Data Protection Directive.[4] Because the GDPR is a regulation, not a directive, it does not require national governments to pass any enabling legislation and is directly binding and applicable.[5]