Regulation 2018/1725

EDPS Formal comments on the draft Commission Implementing Regulation on establishing the technical specifications and other requirements for the decentralised IT system, referred to in Regulation (EU) 2023/1543 of the European Parliament and of the Council.

Article 42 of Regulation (EU) 2018/1725 requires the EDPS to be consulted on proposals for legislative and other acts with an impact on the protection of individuals’ rights and freedoms with regard to the processing of personal data. The purpose of this guidance is to offer practical advice to the Commission, European Parliament and Council on the main elements to consider with regards to legislative proposals and other acts that imply the processing of personal data.

The EDPS Annual Report 2024 is about acting for the future of data protection, preparing for the diverse possibilities and risks that the digital landscape presents. 

Guided by our 2020 - 2024 strategy and its principles: Foresight, Action and Solidarity, the EDPS has: unveiled and taken steps to start executing its Strategy for AI,  monitored and analysed technologies, including AI- led technologies, advised EU-co legislator on upcoming EU regulations directly impacting people’s privacy and data protection, providing tools to EUIs to ensure their compliance with EU data protection laws, influence the development of data protection globally. 

EDPS Supervisory Opinion 3/2025 on the draft decision of the management board of the European Insurance and Occupational Pensions Authority (EIOPA) adopting implementing rules for the application of regulation (eu) 2018/1725, including rules concerning the data protection officer.

A Comprehensive Initiative to Strengthen Compliance on Personal Data Breach Management.

In 2024, the European Data Protection Supervisor (EDPS) launched a dedicated campaign to raise awareness of personal data breaches, one of 20 initiatives organised to mark the institution’s 20th Anniversary. The campaign ran from March to October 2024,