Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.
2004 was the year in which the EDPS was set up, with indispensable assistance from the European Parliament, the Council and the European Commission. Although the legal obligation to respect data protection was not new to the EC institutions and bodies, they face a new situation - being monitored by an independent supervisory authority. The EDPS took a pragmatic approach to enforcing data protection and allowed for a learning period, during which a sound data protection culture can be developed. 2004 also saw the EDPS establishing himself as an advisor to the legislative procedures by issuing his first consultative opinion.