European data protection treats privacy as a fundamental right, not merely a consumer-protection or contractual matter. Its roots run from Article 8 of the European Convention on Human Rights (1950) and Council of Europe Convention 108 (1981) — the first binding international data-protection treaty — through the EU Data Protection Directive 95/46/EC to today's GDPR.

Two distinct rights now sit in the EU Charter of Fundamental Rights: Article 7 (respect for private life) and Article 8 (protection of personal data). Understanding this rights-based foundation explains why the GDPR is strict, broad and enforced by independent authorities rather than left to the market.

Key idea: In Europe, data protection is a fundamental right grounded in human-rights law — the GDPR implements that right, it does not create it from nothing.

⚖️ Fundamental right📜 Convention 108🇪🇺 Charter Art. 7 & 8

🔏 CIPP/E Privacy (GDPR)