The EU has set up a number of large-scale IT systems including Eurodac; the Visa Information System; the Schengen Information System; the Customs Information System; the Internal Market Information System.
The supervision of these databases is shared between the national Data Protection Authorities and the EDPS.
In order to ensure a high and consistent level of data protection, national DPAs and the EDPS work together to coordinate the supervision of these databases.
With Christmas and a new year just around the corner, there is still time for one more catch-up on all things European data protection. In this issue, we have: horizon-scanning releases looking at emerging tech, a look at recent international meetings between data protection authorities, and privacy-focused events to kick off your 2026. Read on!
Opinion 30/2025 on the signing and conclusion of an Agreement between the EU and the Swiss Confederation on the transfer of Passenger Name Record data
EDPS Decision 65/2025 authorises the use of contractual clauses between the European Commission and the Turkish National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Türkiye, pursuant to Article 48(3)(a) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the form of remote access to the European Commission’s corporate IT tool used for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Türkiye by the Turkish National Agency, the Centre For European Union Education And Youth Programmes, as processor and by other sub-processors.
EDPS Decision 67/2025 authorises the use of contractual clauses between the European Commission and the Serbian National Agency for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Serbia, pursuant to Article 48(3)(a) of Regulation (EU) 2018/1725. The authorisation concerns transfers of personal data in the form of remote access to the European Commission’s corporate IT tool used for the implementation of the Erasmus+ and European Solidarity Corps Programmes in Serbia by the Serbian National Agency, Fondacija Tempus, as processor and by other sub-processors.
EDPS Model Administrative Arrangement (Model) for transfers of personal data from EU institutions, bodies, offices and agencies (EUIs) to third country public authorities.
The Model aims to help EUIs comply with the applicable EU data protection law, Regulation (EU) 2018/1725, when they need to transfer personal data to third country public authorities under Article 48(3)(b), within the remit of their tasks.