Earlier this week, on December 15, 2015, EU officials approved the text of new data privacy regulations after nearly four years of discussions. The EU-wide bill, which will supersede what is now known as the EU Data Protection Directive, is intended to unify the patchwork of 28 national privacy laws, and bring the rules up to date for the digital age. This article discusses the highlights and implications of the bill.