Data Protection Officer

This Guidance sets out the EDPS interpretation of the role, position, and tasks of DPOs in Union institutions, bodies, offices and agencies (EUIs) under Regulation (EU) 2018/1725. It aims to support EUIs in ensuring the effective, independent, and consistent application of Union data protection law, while reinforcing the DPO’s role as a key internal safeguard for the protection of personal data.

NB: The EDPS Decision adopting the Rules on the application of the requirement of prior consent by the EDPS for the dismissal of DPOs mentioned in the Guidance, is scheduled to be published in the Official Journal of the European Union at the start of 2026 and shall enter into force on the 20^th day after its publication.

Decision 55/2025 of the European Data Protection Supervisor (‘EDPS’) in investigation case 2025-0787 against the European Defence Agency (‘EDA’)

Supervisory Opinion 12/2025 on the draft implementing rules concerning the data protection officer of the European Union Agency for Law Enforcement Training (CEPOL)

EDPS Decision 35/2025 concerning investigation on the dismissal of the data protection officer of the Committee of the Regions