It depends on the citation style you need to use.
Official title
If you want to find out the 'official' name of an EU legal text, you should consult the EUR-Lex.
Accordingly, the official name of the GDPR is:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)
It was published in
OJ L 119, 4.5.2016, p. 1–88
(
OJ
= Official Journal of the European Union,
L
= the Legislation series).
However, the GDPR has been amended since its first entry-into-force. If you want to cite the current version, you could cite the 'consolidated' text:
Consolidated text: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)
.. which carries the Document number 02016R0679-20160504.
Scholarly citation: example of OSCOLA
For scholarly referencing, you usually need the information of "who, when, what, where": who is the author, when was it published, what is the title, and where can it be accessed.
The specific implementation of this principle of "who, when, what, where" depends on the citation style.
For instance, OSCOLA (Oxford University Standard for the Citation of Legal Authorities) - an oft-used citation style for legal publications - requires you to name "the legislation type, number and title, followed by publication details in the OJ" when citing EU regulations like the GDPR.
If you use OSCOLA, the GDPR could be cited like this:
- Text:
Regulation 2016/679
(but you could add General Data Protection Regulation
or GDPR
in parenthesis thereafter to indicate that this is how you label it in the subsequent references - - which is certainly not wrong given that the official name of the Regulation contains this shorter version in its title)
- Footnote:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [2016] OJ L 119/1
- Subsequent footnotes:
Reg 2016/679
(or: GDPR
, if you introduced it as such)