{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":null,"checked_against":null},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts","title":"Implementing acts","family":"landing","work_id":"gdpr","status":"in_force","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":null,"check":null,"check_result":null,"official_url":null,"valid_from":null,"valid_until":null,"revision":null,"content_id":null,"change_date":null,"nearest_versions":[],"first_text_date":null,"correction_applies":false,"versions":[],"version_url":null,"revision_url":null,"versions_url":null,"relations_url":null,"source_line":null,"attribution":null},"provenance":{"official_url":null,"check":{"result":null,"checked_at":null,"against":null},"repo_path":"spaces/gdpr/level-2/implementing-acts/README.md","body_sha256":"f7c91906d4ae7c6e282a102e50b0203d19d2921d3c2bb8d9b8d95d433776253f"},"units":[],"markdown":"---\ntitle: \"Implementing acts\"\nshortTitle: \"Implementing acts\"\ndescription: \"Implementing acts — GDPR (8 instruments).\"\ntype: section_index\n---\n\nImplementing acts under GDPR, ordered by official identifier.\n\n- [2019/419 — Decision — Adequate protection of personal data by Japan \\[in force\\]](2019-419-adequate-protection-of-personal-data-by-japan.md)\n- [2021/914 — Decision — Standard contractual clauses for transfer to third countries \\[in force\\]](2021-914-standard-contractual-clauses-for-transfer-to-third-countries.md)\n- [2021/915 — Decision — Contractual clauses between controllers and processors \\[in force\\]](2021-915-contractual-clauses-between-controllers-and-processors.md)\n- [2021/1772 — Decision — Adequate protection of personal data by the United Kingdom \\[in force\\]](2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom.md)\n- [2022/254 — Decision — Adequate protection of personal data by the Republic of Korea \\[in force\\]](2022-254-adequate-protection-of-personal-data-by-the-republic-of-korea.md)\n- [2023/1795 — Decision — Adequate protection under the EU-US Data Privacy Framework \\[in force\\]](2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework.md)\n- [2025/1382 — Decision — Adequate protection by the European Patent Organisation \\[in force\\]](2025-1382-adequate-protection-by-the-european-patent-organisation.md)\n- [2026/179 — Decision — Adequate level of protection of personal data by Brazil \\[in force\\]](2026-179-adequate-level-of-protection-of-personal-data-by-brazil.md)\n"}