A hospital privacy board wants the short name and official citation style for the GDPR. Which identification is correct?
Select an answer to reveal the explanation.
Short Explanation
Short name, long citation—like calling a medicine by brand and by chemical ID. The GDPR’s formal label is Regulation (EU) 2016/679. The old Directive 95/46 is history for general EU DP, Regulation 2018/1725 is the EU institutions’ cousin, and Convention 108+ is Council of Europe treaty law, not the GDPR itself.
Full Explanation
The General Data Protection Regulation is formally Regulation (EU) 2016/679, commonly abbreviated GDPR. Hospital privacy boards should use that citation in policies, DPIAs, and vendor contracts rather than recycled Directive numbers. Directive (EU) 95/46 is not the primary general statute still in force. Regulation (EU) 2018/1725 governs processing by Union institutions and bodies and is not the Member-State private-sector GDPR citation. Convention 108+ is Council of Europe treaty material, not the EU regulation abbreviated as GDPR. Precise identification matters because wrong citations cascade into wrong supervision assumptions and wrong template libraries. Exam caveat: citation traps mix 95/46, 2016/679, 2018/1725, and 108+—match GDPR to 2016/679. Operational check: search municipal templates for “95/46” and “2018/1725” used as GDPR synonyms; correct them to Regulation (EU) 2016/679 before the next audit cycle. For municipal teams, keep a one-page decision note that states the governing instrument, why competing labels fail, and what evidence would change the conclusion. Document the decision trail so auditors can see how the civic team matched facts to the correct legal category rather than to a slogan.