EDPB publishes annual report 2025
The EDPB’s 2025 Annual Report highlights increased GDPR enforcement, cross-border cooperation, guidance on new technologies, and €300 million in fines for data protection violations.
guidance
EDPB Adopts Guidelines on Personal Data Processing for Scientific Research
The EDPB issued guidelines to clarify GDPR compliance for scientific research, covering consent, data subject rights, responsibilities, and technical safeguards.
Spanish Data Protection Authority Issues Guidance on Agentic AI
The Spanish Data Protection Authority issues detailed GDPR guidance to help organizations manage privacy risks of autonomous agentic AI systems.
EDPS Introduces Binding Rules to Safeguard DPO Independence in EU Bodies
The EDPS has introduced new guidance and binding rules to protect the independence and role of Data Protection Officers across all EU institutions.
EDPB Adopts Updated Recommendations for Processor Binding Corporate Rules
The EDPB updated recommendations for Processor Binding Corporate Rules to clarify GDPR compliance and streamline intra-group data transfers outside the EEA.
EDPB Issues Recommendations on Legal Basis for User Accounts on E-commerce Sites
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
EDPS Revises Generative AI Guidance for EU Institutions
EDPS updated guidance strengthens data protection rules for generative AI used by EU institutions, adding a practical compliance checklist and clearer controller/processor responsibilities.
EDPB and European Commission Publish Joint Guidelines on DMA and GDPR
EDPB and European Commission issued joint guidelines clarifying how gatekeepers must apply GDPR obligations when complying with the Digital Markets Act; public consultation open until 4 Dec 2025.
EDPB Releases 2024 Report on GDPR Enforcement and Strategy
The EDPB’s 2024 Annual Report highlights new strategies, increased GDPR guidance, stakeholder engagement, and efforts to simplify data protection across Europe.
IAB Submits Feedback on EDPB’s Consent or Pay Guidelines
IAB Europe and trade associations urge the EDPB to adopt a balanced approach to “Consent or Pay” models, emphasizing user choice and economic implications.
EDPB Adopts Opinion on Personal Data Use for AI Model Development
The EDPB’s opinion clarifies the use of personal data in AI development, focusing on anonymity, legitimate interest, and the consequences of unlawful data processing.
EDPB Publishes Guidelines on GDPR Data Transfers to Non-European Authorities
EDPB issued guidelines on GDPR Article 48 for data transfers to third country authorities and approved a new European Data Protection Seal.