After a four-year gestation period, political agreement has finally been reached on the new EU legal regime for data protection. An “agreed in principle” text of the proposed General Data Protection Regulation has been published. The text is likely to be modified for linguistic and consistency reasons, but the rights, obligations and potential penalties have been determined. The law should be formally adopted around Easter…