EDPS Annual Report 2025: protecting people in a changing digital world
Speech by Wojciech Wiewiórowski at the LIBE Committee presenting the Annual Report 2025
Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.
The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.
The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.
Speech by Wojciech Wiewiórowski at the LIBE Committee presenting the Annual Report 2025
The EDPS Annual Report 2025 looks back over a year when our work was characterised by the operationalisation of our expanding mandate, guided by our strategic principles: Foresight, Action and Solidarity.
This year’s highlights include:
The digital future is here. We are guiding the EU administration through this transformation with expertise and an unwavering focus on your rights.
EDPS Decision 46/2026 authorises the use of an administrative arrangement based on the EDPS Model Administrative Arrangement for transfers of personal data from the European Medicines Agency to the Council of Europe European Directorate for the Quality of Medicines & HealthCare, pursuant to Article 48(3)(b) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the in the context of the Cooperation Agreement between the parties on the sampling and testing programme for medicines.
Supervisory Opinion 07/2026 on the draft internal rules concerning the provision of information to data subjects and the restriction of certain data subjects’ rights in relation to the processing of personal data by the European Commission for the purpose of the investigation, enforcement and monitoring under the foreign subsidies regulation (case 2026-0397).
Supervisory Opinion 06/2026 on the draft internal rules concerning the provision of information to data subjects and the restriction of certain data subjects’ rights in relation to the processing of personal data by the European Commission for the purpose of the investigation, enforcement and monitoring under the Digital Markets Act (Case 2026-0326).