Print

Investigations

Inquiries

The EDPS conducts investigations in accordance with:

The EDPS may decide to start an investigation when we have a strong suspicion of an infringement of data protection rules by an EUI. The investigation procedure is structured in different phases. In all phases, the EDPS strictly complies with the principles of proportionality and fairness and applies the EDPS’ core values: impartiality, integrity, transparency and pragmatism.

The aim of the investigation is to check whether an infringement of the applicable data protection rules, in particular the EUDPR has occurred and to establish its circumstances.

Filters

8
Mar
2024

EDPS decision on the investigation into the European Commission's use of Microsoft 365

On 8 March 2024, the EDPS adopted a decision following its investigation into the European Commission's use of Microsoft 365. In the decision, the EDPS focused on compliance with provisions of Regulation (EU) 2018/1725 related to purpose limitation and international transfers and unauthorised disclosures of personal data (see also press release).

Available languages: English
27
Sep
2023

Rules on the Hearing in EDPS' investigations

The EDPS has adopted a Decision on the Rules on the Hearing in EDPS' Investigations. These Rules apply to any hearing which is held to ensure the proper exercise of the right to be heard of the controllers or processors that could be adversely affected by an EDPS' final decision adopted in own-initiative investigations and inquiries.

Available languages: English
30
Jan
2023

How the EDPS conducts investigations

The EDPS may decide to start an investigation when we have a strong suspicion of an infringement of data protection rules by an EUI.

The aim of the investigation is to check whether an infringement of the applicable data protection rules, in particular the EUDPR, has occurred and to establish its circumstances.

To find out more about the process of EDPS investigations, consult our Investigation Policy and Investigation Factsheet below.

EDPS Investigation Policy
Available languages: English
EDPS Investigation Factsheet
Available languages: English
10
Jan
2022

EDPS orders Europol to erase data concerning individuals with no established link to a criminal activity

On 3 January 2022, the EDPS notified Europol of an order to delete data concerning individuals with no established link to a criminal activity (Data Subject Categorisation). This Decision concludes the EDPS’ inquiry launched in 2019.

Decision
Available languages: English
FAQs
Available languages: English