The right to the protection of personal data has become a very important item in modern life. With the help of personal data, we differentiate ourselves from other people and have the ability to introduce ourselves to the new digital world full of other individuals as simply and quickly as possible. Together with the development of these technologies, the issue of personal data protection also came into play, and thus the old legal framework was replaced by a new one. With the introduction of the new regulation on the protection of personal data, we have been given the possibility of complete security, but with the condition that we consciously and responsibly use technologies and media that provide insight into our personal data. The European Union made a decision to introduce the General Data Protection Regulation (GDPR), which entered into force on May 25, 2018. The changes introduced by the regulation should enable citizens to have greater control over personal data that is collected and processed in order to provide them with certain services. The paper presents examples of judicial practice at the European and national level in which the provisions of the General Regulation were used. The legal framework of data protection before the introduction of the General Data Protection Regulation was also presented.