(
2026/06/10:
)
The template is subject to a public consultation, providing stakeholders with the opportunity to share their comments and feedback on the content of the template. Following the public consultation, the EDPB will decide on the timeline for the practical implementation of the template by all
(
2026/04/15:
)
The EDPB DPIA template is subject to a public consultation. After the public consultation is finished, the template will be finalised (subject to any appropriate modifications), after which all data protection authorities will begin the necessary steps to adopt this template as their unique template or as a ‘meta-template’ with which national specific templates will be compatible. In the meantime, organisations are encouraged to use this template and to provide feedback in the context of the public
(
2026/03/26:
)
Since the entry into force of the GDPR, Data Protection Authorities (DPAs) have closely cooperated to adopt a growing number of one-stop-shop (OSS) decisions on the legal basis of "legitimate interest", as shown by the decisions on this matter available in the EDPB register . The OSS decisions assess and present a wide range of factual contexts. This case digest provides useful examples of how DPAs analyse controllers’ reliance on the legal basis of “legitimate interest” in specific contexts, providing positive and negative compliance examples. The external expert who authored the digest explains and summarises how DPAs apply the three-step test to assess whether a controller can lawfully rely onlegitimate interests as a legal basis.. The case digest also takes into account the EDPB Guidelines 1/2024 on Processing of Personal Data Based on Article 6(1)(f) GDPR and illustrates how parts of these Guidelines apply in practice . Relevant cases before the C
(
2026/03/05:
)
The Data brokers market study provides a methodology to identify data brokers and presents a typology of data brokers, together with an analysis of their business models and an initial risk assessment. In addition, the report provides an in-depth overview of a number of data brokers and providers identified in Belgium, ranked by type. Possible data brokers were assessed against the criteria outlined in the report. Overall, the study shows that the data broker and provider market in Belgium is highly diverse, with varying levels of risk related to personal data usage. The EDPB launched the project in the context of the Support Pool of Experts programme at the request of the Belgian Data Protection Authority (DPA). The project was completed by external SPE expert Ruben d'Hauwers in November 2025. Objective This study aims to give greater insights into the ecosystem of personal data providers and data brokers operating in Belgium, while also offering a framework to detect likely high-risk data provider
(
2026/02/02:
)
The Report on International Data Protection Enforcement Cooperation focuses on the cooperation between EEA data protection authorities (DPAs) and DPAs in countries or organisations with an EU adequacy decision, while also exploring how insights from other regulatory fields may inspire improvements to strengthen cross-border enforcement cooperation. The Report analyses the current state of international enforcement cooperation in data protection and assesses whether, and to what extent, useful lessons can be drawn from the related cooperation frameworks in consumer protection and competition law. To this end, the Report reviews both legally binding and “soft law” instruments currently available to DPAs, evaluates their practical use, and identifies the challenges that hinder more robust forms of cross-border cooperation. The EDPB launched this project in the context of the Support Pool of Experts programme as part of its cooperation with DPAs from countries and organisations with an EU adequa
(
2025/12/03:
)
Following its Helsinki Statement on enhanced clarity, support and engagement , in order to facilitate GDPR compliance, the EDPB intends to develop a series of ready-to-use templates for organisations. The EDPB is organising this public consultation to collect your ideas on the matter. More specifically, we would like to understand which templates you consider would be most useful for organisations (e.g. template privacy notice, template record of processing activities, etc.). For your information, the EDPB will already work on creating a template for data protection impact assessment (DPIA) and for data breach notifications. We invite you to provide your ideas and inputs by completing the public consultation below by 3 December 2025 , either by filling in the blank field or by uploading a document. In case you would like to upload your contribution as a document, we kindly ask you to provide a text of maximum 2500 characters (1 page document). By clicking “ Provide your feedback ”, you will be red
(
2025/12/03:
)
An expert opinion Over the last year, the EDPB has been working to ensure the highest standards of data protection and privacy in the context of the establishment of the digital euro. For example, the EDPB has adopted a joint opinion with the European Data Protection Supervisor (EDPS) on the Proposal for a Regulation on the establishment of the digital euro . Decisions regarding the design of the digital euro have significant implications for the rights and freedoms of European individuals as well as for their ability to use data protection-friendly and digital payment methods in the future. Taking into consideration the joint opinion by the EDPB and the EDPS, the EDPB requested an expert to make an in-depth assessment of the practical feasibility of the “token-based offline modality”, which the EDPB supports. The EDPB also asked the expert to investigate how this solution, suggested by the European Commission and the Eurosystem, can be implemented to ensure the very high level of protection envis