# Modifying Privacy Policy to conform with EU law

**URL:** <https://meta.discourse.org/t/modifying-privacy-policy-to-conform-with-eu-law/54039>\
**Category:** Product Support\
**Tags:** privacy\
**Created:** [December 9, 2016, 9:14pm UTC](https://meta.discourse.org/t/modifying-privacy-policy-to-conform-with-eu-law/54039 "2016-12-09T21:14:20Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)\
**Post date:** [August 9, 2017, 3:34am UTC](https://meta.discourse.org/t/modifying-privacy-policy-to-conform-with-eu-law/54039/10 "2017-08-09T03:34:20Z")

</div>

> [@tophee](#):
>
> I was just referring to the Swedish data protection authority which states that Swedish data protection laws don’t apply to an online community run by a British company.

The question you’ve linked to is about the [Personal Data Act 1998](http://www.wipo.int/edocs/lexdocs/laws/en/se/se097en.pdf) (PDA) which implemented the [Data Protection Directive | 95/46/EC](http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:en:HTML) (DPA)

Section 4 of the PDA states

```plaintext
This Act applies to those controllers of personal data who are established in Sweden.

```

However, the DPA, which the PDA enables, is being replaced by the [General Data Protection Regulation](http://www.eugdpr.org/more-resources-1.html) (GDPR). As the GDPR is a regulation (not a directive), it does not require enabling legislation in EU member countries.

[Article 288 of the Treaty on the Functioning of the European Union](http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:12012E288) provides

```plaintext
A regulation shall have general application. It shall be binding in its entirety and directly applicable in all Member States.

```

The upshot of this is that it doesn’t technically matter which Data Protection Authority you choose to focus on. The law (i.e. the GDPR) is the same in each EU country.

Some DPAs may take different ‘attitudes’ to enforcement / compliance, however they are enforcing the same law.

What I meant by ‘your DPA’ is that, in addition to the possibility of slightly different ‘attitudes’, you’ll find some DPAs easier to deal with than others due to language, website, etc.

disclaimer: this does not constitute legal advice, it is opinion only.

---

_[View the full topic](https://meta.discourse.org/t/modifying-privacy-policy-to-conform-with-eu-law/54039)._