There are several national data protection authorities across the world, tasked with protecting information privacy. In the European Union and EFTA member countries, their status was formalized by the Data Protection Directive and they were involved in the Madrid Resolution. Since 25 May 2018, the General Data Protection Regulation (GDPR) replaced the Data Protection Directive.