Managing Shadow AI’s Hidden Data Breach Risk
The use of unauthorised AI tools that can expose personal data, create regulatory blind spots, and open security vulnerabilities.
The use of unauthorised AI tools that can expose personal data, create regulatory blind spots, and open security vulnerabilities.
On 8 June 2026, the European Data Protection Supervisor (EDPS), the German Federal Commissioner for Data Protection and Freedom of Information (BfDI), and the Bavarian Data Protection Commissioner (BayLfD) are organising a high‑level debate on the European Commission’s Omnibus proposals and their implications for the General Data Protection Regulation (GDPR) and the broader EU digital regulatory framework. The event is kindly hosted by the Representation of the Free State of Bavaria to the European Union.
When: 8 June 2026, 18:30 to 20:30 (accreditation opens at 18:00), followed by a reception
Where: Representation of the Free State of Bavaria to the European Union, Brussels
On 9 May, Europeans celebrate Europe Day. Europe has continued to shape big ideas that unite people around shared values & fundamental rights. Our commitment to human-centric, transparent technology remains more important than ever.
The EDPS Annual Report 2025 looks back over a year when our work was characterised by the operationalisation of our expanding mandate, guided by our strategic principles: Foresight, Action and Solidarity. Consult the full Annual Report 2025 and its executive summary to get the full picture of our actions, monitoring activities, and new roles.
The digital future is here. We are guiding the EU administration through this transformation with expertise and an unwavering focus on your rights.
Curious about how the EU is tackling AI supervision, cybersecurity rules, and data protection in the health industry? Our newest episode breaks it all down.
Welcome to this edition of the EDPS Newsletter, focusing on new regulatory roles and essential safeguards
In his latest blog post, Supervisor Wojciech Wiewiórowski discusses prior consultations between EU law and justice authorities and the EDPS. These checks are required when planned data processing operations are likely to result in a high risk to individuals’ rights and freedoms.
Newsletter Digest brings you a wealth of information in audio format. Today, we are focusing on three key developments shaping the future of data protection in Europe.
On 18 March 2026, the EDPB and the EDPS adopted a Joint Opinion on the European Commission’s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network and Information Security 2 (NIS2) Directive. The EDPB and the EDPS support strengthening EU’s cybersecurity and easing compliance while protecting individuals’ personal data.