EDPB announces 2026 Coordinated Enforcement Framework on GDPR transparency
The European Data Protection Board (EDPB) has launched its Coordinated Enforcement Framework (CEF) for 2026, focusing on ensuring compliance with transparency and information obligations under the GDPR. This initiative follows the 2025 coordinated action centered on the right to erasure. Transparency is a fundamental right under the GDPR, requiring organizations to inform individuals when their personal data is being processed, as outlined in Articles 12, 13, and 14.
In 2026, 25 Data Protection Authorities (DPAs) across Europe will participate in this effort. These authorities will assess how well controllers comply with transparency obligations. The DPAs will reach out to organizations from various sectors through enforcement actions or fact-finding exercises. Where necessary, follow-up actions may be taken to address any identified issues.
During the second half of the year, the participating DPAs will exchange their findings to create a comprehensive overview of the state of transparency compliance across Europe. This collaborative process will culminate in a consolidated report, which the EDPB will adopt. The report will help guide targeted follow-ups at both national and EU levels to improve transparency practices.
The CEF is part of the EDPB’s 2024-2027 Strategy to enhance cooperation and streamline enforcement among DPAs. Previous coordinated actions have addressed topics such as the use of cloud services by the public sector, the role of Data Protection Officers, and the right of access. This year’s focus on transparency underlines the ongoing commitment to protecting individuals’ data rights across the EU.
