The Directive (EU) 2016/680 aims to protect individuals' personal data processed by competent authorities for criminal justice purposes, including the prevention and prosecution of criminal offences. It underscores the fundamental rights of natural persons to personal data protection, addressing the evolving challenges posed by technology and globalisation. The Directive seeks to ensure a high level of data protection while facilitating the free movement of personal data within the Union, necessitating a coherent framework and robust enforcement mechanisms.

Member States are required to adopt laws that comply with the Directive by 6 May 2018, ensuring that data processing is lawful, fair, and transparent. Specific rights are granted to data subjects, such as access, rectification, and erasure of their personal data, with provisions for restrictions to protect public security. The Directive also establishes strict conditions for transferring data to third countries, ensuring that any such transfer does not undermine the protections afforded within the EU.