Useful infographics and documents to help you stay informed about your rights and responsibilities regarding data protection.


How the EDPS conducts investigations

The EDPS may decide to start an investigation when we have a strong suspicion of an infringement of data protection rules by an EUI.

The aim of the investigation is to check whether an infringement of the applicable data protection rules, in particular the EUDPR, has occurred and to establish its circumstances.

To find out more about the process of EDPS investigations, consult our Investigation Policy and Investigation Factsheet below.

EDPS Investigation Factsheet
Available languages: English

Top 3 Consultations and Complaints in 2022

As part of our work, the EDPS is consulted by EU institutions, bodies, offices and agencies (EUIs), their data protection officers, on their day-to-day activities with an impact on data protection and the processing of individuals’ data. We also process complaints made by individuals about how their personal data has been processed by an EUI.

Available languages: English

Ongoing investigation into the use of M365 by EUIs after Schrems II

The EDPS has an ongoing investigation into Commission’s use of Microsoft Office 365 (M365).
While the ongoing investigation by the EDPS concerns the Commission in its capacity as a controller for its use of M365, the future outcome of this investigation should nevertheless be instructive for other EU institutions (EUIs) procuring of Microsoft products and services under the same inter-institutional licensing agreement with Microsoft.

Available languages: English