The GDPR was approved in April 2016. But it took two years for the framework to be established. As such, the regulation went into full effect on May 25, 2018.