A records manager thinks Directive 95/46/EC is still the primary EU personal-data statute for general processing. Which update should training deliver?
Select an answer to reveal the explanation.
Short Explanation
Directive 95/46 was the old general playbook; the GDPR is the new regulation that took over that field. Keeping the Directive as “still primary” is like quoting a retired employee handbook after a company-wide rewrite. Know the history — apply the successor.
Full Explanation
The GDPR is the successor EU regulation that replaced Directive 95/46/EC as the general framework for personal-data protection in that field. Records managers still benefit from knowing the Directive’s principles because continuity of concepts aids interpretation, but Directive 95/46/EC is not the current primary general statute for ordinary processing. It was not renamed the ePrivacy Directive; ePrivacy is a separate regime focused on electronic communications confidentiality and related rules. The old Directive was never limited to paper microfiche. It does not remain supreme over the GDPR wherever cookies are used—cookie and communications issues may engage ePrivacy alongside GDPR, but that does not resurrect 95/46/EC as the governing general DP law. Exam caveat: Directive 95/46/EC versus GDPR items test succession and direct applicability of a regulation versus the old directive-plus-national-implementation model. Operational check: purge templates that still cite under Directive 95/46/EC for active municipal processing; replace with GDPR article references and retain Directive citations only in historical annexes. For municipal teams, keep a one-page decision note that states the governing instrument, why competing labels fail, and what evidence would change the conclusion.