Before you read
This site is NOT legal advice, and using it creates no lawyer and client relationship. It is a set of findings, checked against published sources and dated, that may help software developers and other individuals. For a decision that matters, ask a qualified lawyer in the country concerned.
Convention 108+
Sources last checked:
Convention 108+ is the modernised version of the Council of Europe’s data protection treaty. It is why GDPR-style duties appear in places with no GDPR of their own.
What it protects
Every individual, whatever their nationality or residence.1
The rights it sets out
Among others, not to be subject to a significant decision based solely on automated processing without your views being considered, and to get confirmation of processing of your data and access to it.2
Whether it is in force
The amending protocol needs 38 ratifications, and it had 33 in October 2025, with 46 signatures.3
Source note: the Council of Europe’s treaty office table could not be reached, so the number may now be higher.