The main objective of this dissertation is to reconstruct the policy process of the General Data Protection Regulation (GDPR) of the European Union. To achieve this goal, it is crucial to thoroughly discuss the theoretical approach employed in this thesis. Therefore, this dissertation undertakes a comprehensive review of various theoretical approaches within the sub-branch of political science known as policy process theories.