News

On 18 March 2026, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) adopted a joint opinion on the European Commission’s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network and Information Security 2 (NIS2) Directive. The EDPB and the EDPS support strengthening EU’s cybersecurity and easing compliance while protecting individuals’ personal data.

Read the press release

Read the joint opinion

Under the AI Act (Regulation (EU) 2024/1689), the European Data Protection Supervisor is now a market surveillance authority for AI systems used by EU institutions and a notified body for high-risk AI assessments.

The EDPS has already launched its AI Preparedness Strategy in May 2024 and established an AI Unit. Our latest document outlines:

• New tasks and strategic vision under the AI Act;
• Operational approach to supervising AI systems;
• Four strategic pillars guiding its role as both regulator and assessor.

This move aims to ensure safe, compliant, and human-centric AI across EU bodies.

After a very busy start to 2026 indeed, we have a bumper newsletter for you.

Catch up on everything from our joint opinions issued with the European Data Protection Board, new rules to protect the independence of EU data protection officers, blog posts from the Supervisor on a range of topics, a look back at some big events, and more!

Read on

On 10 March 2026, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) adopted a joint opinion on the European Commission's proposal for a European Biotech Act. The two organisations support harmonisation of clinical trials, but call for specific safeguards for sensitive health data.

Read the press release

Read the joint opinion

TechDispatch Talks explores the intersection of technology, data protection, and privacy. In this episode we discuss how Digital Identity Wallets could transform the way we prove who we are online and offline. Could it reduce data oversharing and profiling while also examining the real privacy and security risks? Join us to know more about Digital Identity Wallets.

The EDPS is among the 61 signatories of a Joint Statement on AI-Generated Imagery issued by data protection authorities from the Global Privacy Assembly.

On 12 February 2026, the European Data Protection Supervisor (EDPS) and the European Data Protection Board (EDPB) Trainees organised the conference Data takes flight: Navigating privacy at the airport. The conference focused on what happens to personal data when travelling by air and encouraged a critical and informed discussion about data protection, security, and the usage of personal data in this context.

Watch the full recording here
Listen to a podcast here

As the EU institutions continue to work to implement the AI Act, a new blog post from EDPS Wojciech Wiewiórowski reflects on the third meeting of the AI Act Correspondents Network.

Read the blog post

The EDPS has published its Opinion on the Proposal to extend Regulation (EU) 2021/1232 regarding interim rules on combatting child sexual abuse online.

Read the press release

Read the Opinion

New guidance and binding rules to protect DPO independence across EU institutions.

Read the press release

Read the Supervisory Guidelines