Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.
EDPS comments on the draft Decision of the European Committee of Regions on internal rules concerning restrictions of certain rights of data subjects (Article 25 of Regulation (EU) 2018/1725) (Case 2021-0345)
Outcome of the EDPS' remote audit on how European institutions, bodies and agencies (EUIs) inform individuals about the way their personal data is processed when signing up to newsletters, case 2020-0611.
EDPS comments on draft internal rules concerning restrictions of certain rights of data subjects in relation to the processing of personal data in the framework of the functioning of the European Union Agency for the Operational Management of the Large-Scale ITSystems in the Area of Freedom, Security and Justice (‘eu-LISA’)
EDPS Opinion on the European Economic and Social Committee’s draft internal rules concerning restrictions of certain rights of data subjects (Article 25 of Regulation (EU) 2018/1725)
EDPS publishes orientations on manual contact tracing by EU Institutions in the context of the COVID-19 crisis.