Reports

On 5 June 2025, the EDPS organised the second edition of PATRICIA - Personal dATa bReach awareness in Cybersecurity Incident Handling, a table-top exercise focusing on personal data breach management. It aimed to raise awareness among European Union Institutions, Bodies and Agencies' (EUIBAs) staff about personal data breach management in a cyber-attack context. This is an Executive Summary of the report. 

This report shows the trends regarding Data Protection Impact Assessments (DPIA) in EU institutions, bodies, offices and agencies and puts forward some conclusions.

The report relates to DPIAs on data processing operations involving administrative data. It does not cover DPIAs conducted by EUIs active in the Area of Freedom, Security and Justice, in particular Europol, Eurojust and the EPPO, when they carry out activities within the scope of judicial cooperation in criminal matters and police cooperation.

On 3 October 2024, the European Union Agency for Cybersecurity (ENISA) and the European Data Protection Supervisor (EDPS) jointly organised a table-top exercise titled “Personal Data Breach Awareness In Cybersecurity Incident Handling” (PATRICIA). The event, hosted at the EDPS premises in Brussels, aimed to raise awareness among staff from European Union Institutions, Bodies, and Agencies (EUIs) on managing personal data breaches.

A Comprehensive Initiative to Strengthen Compliance on Personal Data Breach Management.

In 2024, the European Data Protection Supervisor (EDPS) launched a dedicated campaign to raise awareness of personal data breaches, one of 20 initiatives organised to mark the institution’s 20th Anniversary. The campaign ran from March to October 2024, 

TechSonar report 2024-2025 explores six emerging technologies: Retrieval-augmented generation (RAG), On-device AI, Machine unlearning, Multimodal AI, Scalable oversight and Neuro-symbolic AI.