Each EU institution, body or agency (EU institutions) has appointed a data protection officer (DPO). It is the DPO's duty to ensure in an independent manner the internal application of the data protection rules applicable to the EU institution. This also involves other tasks such as ensuring that controllers and individuals (data subjects) are informed of their rights and obligations, and cooperating with the EDPS at his request or on their own initiative. A list of data protection officers can be found on the EDPS website.
Decision 55/2025 of the European Data Protection Supervisor (‘EDPS’) in investigation case 2025-0787 against the European Defence Agency (‘EDA’)
Supervisory Opinion 12/2025 on the draft implementing rules concerning the data protection officer of the European Union Agency for Law Enforcement Training (CEPOL)
EDPS Decision 35/2025 concerning investigation on the dismissal of the data protection officer of the Committee of the Regions
Supervisory Opinion 9/2025 on the draft DPO implementing rules for the EFTA surveillance authority
The EDPS Annual Report 2024 is about acting for the future of data protection, preparing for the diverse possibilities and risks that the digital landscape presents.
Guided by our 2020 - 2024 strategy and its principles: Foresight, Action and Solidarity, the EDPS has: unveiled and taken steps to start executing its Strategy for AI, monitored and analysed technologies, including AI- led technologies, advised EU-co legislator on upcoming EU regulations directly impacting people’s privacy and data protection, providing tools to EUIs to ensure their compliance with EU data protection laws, influence the development of data protection globally.