•This article concerns the proposal by the European Commission to govern data protection on the basis of a regulation. It considers arguments in favour and against using a regulation with respect to general data protection law.
•A regulation sustains harmonization primarily in respect to transational data processing but cannot achieve the goal of full harmonization within the EU.
•A regulation has several negative conseqwuensces for datta protection at the national level. It is furthermore assumed that the proposed Regulation will improve the position of datat subjects but it is disappointing that key issues with respect to social networks have not been addressed.