It is already in place, but on the 25th of May, the law will be enforceable:
EU GDPR: General Data Protection Regulation.
This is not the official site for the regulation but gives you a solid overview of it. Following a 2 year post-adoption grace period, the GDPR will become fully enforceable throughout the European Union.