EDPB publishes 2025 Report on Coordinated Enforcement Action
he European Data Protection Board (EDPB) has published its 2025 report focusing on the right to erasure under the General Data Protection Regulation (GDPR). This right, often known as the “right to be forgotten,” allows individuals to request the deletion of their personal data when certain conditions are met. The report provides an overview of how this right has been applied across the European Union and highlights key challenges faced by data controllers and processors.
The report reveals that while many organizations have implemented processes to handle erasure requests, inconsistencies remain in how these requests are managed. Some data controllers struggle with balancing the right to erasure against other legal obligations, such as compliance with retention requirements for tax or criminal law. The EDPB emphasizes the importance of clear guidelines to ensure that the right to erasure is respected without undermining other legitimate interests.
Furthermore, the report identifies common obstacles, including difficulties in verifying the identity of the requester and technical challenges related to deleting data from backup systems or third-party processors. It encourages organizations to adopt robust procedures and invest in technologies that facilitate efficient and secure data deletion. The EDPB also stresses the need for ongoing training and awareness to improve the handling of erasure requests.
Overall, the EDPB’s 2025 report serves as a valuable resource for data protection officers, legal teams, and organizations aiming to comply with GDPR requirements. By addressing practical issues and promoting best practices, the report supports the effective exercise of the right to erasure, ultimately enhancing individuals’ control over their personal information.
