<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":null,"checked_against":null},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts","title":"Implementing acts","family":"landing","work_id":"gdpr","status":"in_force","force_status":null,"date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":null,"check":null,"check_result":null,"official_url":null,"valid_from":null,"valid_until":null,"revision":null,"content_id":null,"change_date":null,"nearest_versions":[],"first_text_date":null,"correction_applies":false,"versions":[],"version_url":null,"revision_url":null,"versions_url":null,"relations_url":null,"source_line":null,"attribution":null}} -->
---
title: "Implementing acts"
shortTitle: "Implementing acts"
description: "Implementing acts — GDPR (8 instruments)."
type: section_index
---

Implementing acts under GDPR, ordered by official identifier.

- [2019/419 — Decision — Adequate protection of personal data by Japan \[in force\]](2019-419-adequate-protection-of-personal-data-by-japan.md)
- [2021/914 — Decision — Standard contractual clauses for transfer to third countries \[in force\]](2021-914-standard-contractual-clauses-for-transfer-to-third-countries.md)
- [2021/915 — Decision — Contractual clauses between controllers and processors \[in force\]](2021-915-contractual-clauses-between-controllers-and-processors.md)
- [2021/1772 — Decision — Adequate protection of personal data by the United Kingdom \[in force\]](2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom.md)
- [2022/254 — Decision — Adequate protection of personal data by the Republic of Korea \[in force\]](2022-254-adequate-protection-of-personal-data-by-the-republic-of-korea.md)
- [2023/1795 — Decision — Adequate protection under the EU-US Data Privacy Framework \[in force\]](2023-1795-adequate-protection-under-the-eu-us-data-privacy-framework.md)
- [2025/1382 — Decision — Adequate protection by the European Patent Organisation \[in force\]](2025-1382-adequate-protection-by-the-european-patent-organisation.md)
- [2026/179 — Decision — Adequate level of protection of personal data by Brazil \[in force\]](2026-179-adequate-level-of-protection-of-personal-data-by-brazil.md)