---
title: "Art. 99 GDPR: Entry into force and application"
canonical: "https://dposchool.com/gdpr/article/99"
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#art_99"
source_note: "Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Art. 99 GDPR · Chapter XI: Final provisions

# Article 99 GDPR: Entry into force and application

Text as of 28 October 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

## Summary (not the official text)

The Regulation enters into force on the twentieth day following its publication in the Official Journal of the European Union and applies from 25 May 2018.

## Official text

### Article 99(1)

**1.** This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

### Article 99(2)

**2.** It shall apply from 25 May 2018.

## Source

Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

[Article 99 on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#art_99)

Text as of 28 October 2026.

This is reference material, not legal advice.

## Related recitals

This list is under review.

- [Recital 171](https://dposchool.com/gdpr/recital/171)

## Court of Justice judgments

### [C-579/21, Proceedings brought by J.M](https://dposchool.com/gdpr/case/c-579-21)

Judgment of 22 June 2023 · ECLI:EU:C:2023:501

Access requests made after 25 May 2018 cover earlier processing; people are entitled to the dates and purposes of consultations of their data, but generally not the names of employees who consulted it.

[CURIA](https://curia.europa.eu/juris/liste.jsf?num=C-579/21&language=en) · [EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62021CJ0579)

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Chapter XI](https://dposchool.com/gdpr/chapter/11) / Article 99

Previous: [Art. 98 GDPR: Review of other Union legal acts on data protection](https://dposchool.com/gdpr/article/98)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents