Abstract
The commentary on the General Data Protection Regulation (GDPR) provides a detailed interpretation of this regulation, taking into account the experience of the first two years of GDPR, including relevant interpretative opinions, decisions and published opinions of the supervisory authority - Personal Data Protection Authority (ÚOOÚ) and also guidelines of the European Data Protection Board; in relevant cases, it also mentions decisions of the ÚOOÚ and courts issued in based on the previous legislation, including the guidelines and opinions of the previous Working Group WP 29.