Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.
The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.
The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.
EDPS comments to the executive agencies concerning the draft implementing rules for the data protection officer (case 2021-0244)
EDPS Opinion to the executive agencies concerning the draft implementing rules for the data protection officer (case 2021-0244)
EDPS comments on draft internal rules concerning restrictions of certain rights of data subjects in relation to the processing of personal data in the framework of the functioning of the European Union Agency for the Operational Management of the Large-Scale ITSystems in the Area of Freedom, Security and Justice (‘eu-LISA’)
EDPS Opinion to the seven Joint Undertakings concerning the Data Protection Officer implementing rules (Case 2021-0037)
Informal consultation from an EUI regarding a draft DPIA under Article 39 of Regulation 2018/1725