The process of globalization that began in the last century has expanded the boundaries of its operations with the rapid development of technology and universal digitization. The exchange of information in the modern world has reached a level that, not too long ago, was incomprehensible. Information and communication technology, which is accessible to almost every individual, has made a significant contribution to this. Customizing the state and national legislation following modern technological development was the challenge that numerous world and European countries were confronted with. The flow of information and data has become an unstoppable process in all areas of human life. Modern technology has made personal information globally available at a new level and in a very short time. According to Article 8.1 of the European Convention for the Protection of Human Rights, everyone has the right to respect for his or her private life. The European Union is developing its legislation to enable its institutions or the Member States to function following the needs of the times we live in. The General Data Protection Regulation - GDPR is the result of the adaptation of the institutions and the Member States of the European Union to the accelerated technological development that other countries in the world are facing. The provisions of Regulation protect the rights of its citizens, but also provide the practical application in the Member States at the same time unifying legal practice and thereby enabling a faster, easier and more secure flow of data among the countries of the Union. The application of GDPR in administration and the judiciary is different. When processing personal data of individuals, public administration is bounded by the rules of the General Data Protection Regulation. The personal data of citizens in the judiciary are processed on various legal bases. The processing and protection of data in the judiciary, although regulated by the GDPR, leaves sufficient room for the Member States of the Union to adapt them to their legislation, since their processing within the judiciary depends largely on the judicial process in which it is conducted. The General Data Protection Regulation has been in force since May 25th 2018. which is less than two years. Considering the relatively short period of its implementation in the EU institutions and in the public administration and judiciary of the EU Member States, as well as its use, it can be concluded that it is recognized as an effective legal instrument for the protection of personal data.