Print

Data Protection Officer

 

Each EU institution, body or agency (EU institutions) has appointed a data protection officer (DPO). It is the DPO's duty to ensure in an independent manner the internal application of the data protection rules applicable to the EU institution. This also involves other tasks such as ensuring that controllers and individuals (data subjects) are informed of their rights and obligations, and cooperating with the EDPS at his request or on their own initiative. A list of data protection officers can be found on the EDPS website.

Filters

7
May
2026

Annual Report 2025: protecting people in a changing digital world

The EDPS Annual Report 2025 looks back over a year when our work was characterised by the operationalisation of our expanding mandate, guided by our strategic principles: Foresight, Action and Solidarity.

This year’s highlights include:

  • the expansion of the AI Unit and activities;
  • a record 145 legislative consultations;
  • increased scrutiny of international data transfers and large-scale IT systems in the EU institutions, bodies, offices and agencies;
  • analysis and foresight related to emerging technologies.

The digital future is here. We are guiding the EU administration through this transformation with expertise and an unwavering focus on your rights.

Annual Report 2025
Available languages: English
SUMMARY (PDF)
Available languages: German, English, French
17
Mar
2026

Newsletter (118)

We have a bumper newsletter this time around, full of all sorts of goings-on in the world of data protection and the EDPS. The start to 2026 has been very busy indeed. We've issued joint opinions with the European Data Protection Board on both the Digital Omnibus and the AI Act. We've established rules to protect data protection officer independence within European institutions. The Supervisor has penned blogposts on EDPS audits, the AI Act Correspondents Network, and the future of regulatory cooperation.

18
Dec
2025

EDPS Supervisory Guidance on the Role of the Data Protection Officers in EU institutions, bodies, offices and agencies

This Guidance sets out the EDPS interpretation of the role, position, and tasks of DPOs in Union institutions, bodies, offices and agencies (EUIs) under Regulation (EU) 2018/1725. It aims to support EUIs in ensuring the effective, independent, and consistent application of Union data protection law, while reinforcing the DPO’s role as a key internal safeguard for the protection of personal data.

NB: The EDPS Decision adopting the Rules on the application of the requirement of prior consent by the EDPS for the dismissal of DPOs mentioned in the Guidance, is scheduled to be published in the Official Journal of the European Union at the start of 2026 and shall enter into force on the 20th day after its publication.

Available languages: English