EDPS Annual Report 2025: protecting people in a changing digital world
Speech by Wojciech Wiewiórowski at the LIBE Committee presenting the Annual Report 2025
Chaque institution, organe ou agence de l'UE (Institutions de l'UE) nomme un délégué à la protection des données (DPD). Il appartient au DPD de veiller de manière indépendante à l'application interne des règles de protection des données applicables aux institutions de l'UE. Cela implique également d'autres tâches telles que de veiller à ce que les responsables du traitement et les personnes concernées soient informés de leurs droits et obligations et coopèrent avec le CEPD à sa demande ou de leur propre initiative. Une liste des délégués à la protection des données peut être consultée sur le site du CEPD.
Speech by Wojciech Wiewiórowski at the LIBE Committee presenting the Annual Report 2025
The EDPS Annual Report 2025 looks back over a year when our work was characterised by the operationalisation of our expanding mandate, guided by our strategic principles: Foresight, Action and Solidarity.
This year’s highlights include:
The digital future is here. We are guiding the EU administration through this transformation with expertise and an unwavering focus on your rights.
We have a bumper newsletter this time around, full of all sorts of goings-on in the world of data protection and the EDPS. The start to 2026 has been very busy indeed. We've issued joint opinions with the European Data Protection Board on both the Digital Omnibus and the AI Act. We've established rules to protect data protection officer independence within European institutions. The Supervisor has penned blogposts on EDPS audits, the AI Act Correspondents Network, and the future of regulatory cooperation.
This Guidance sets out the EDPS interpretation of the role, position, and tasks of DPOs in Union institutions, bodies, offices and agencies (EUIs) under Regulation (EU) 2018/1725. It aims to support EUIs in ensuring the effective, independent, and consistent application of Union data protection law, while reinforcing the DPO’s role as a key internal safeguard for the protection of personal data.
NB: The EDPS Decision adopting the Rules on the application of the requirement of prior consent by the EDPS for the dismissal of DPOs mentioned in the Guidance, is scheduled to be published in the Official Journal of the European Union at the start of 2026 and shall enter into force on the 20th day after its publication.