Personal data protection has been standing topic in the Czech Republic. Unfortunately, the adaptation to GDPR was not completed for eleven months after GDPR came into force. This led to a great legal uncertainty. There is a lack of guidance from the relevant public sector bodies. For instance, the Office for Personal Data Protection (Czech DPA) decided that it does not have capacity to prepare guidelines for sector-specific areas and relied on the ministries to prepare them. Unfortunately, not much has been done. In the legal doctrine the situation is only slightly better. There have been published practically aimed articles. Some have added value to the topic, and other merely paraphrase the relevant legislation. There are currently only a few Czech commentaries on the GDPR and on the new Czech data protection framework, which are unfortunately very general. This article presents the most notable novelties and focuses on several problems, that have arisen in recent months.