Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.
The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.
The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.
EDPS Supervisory Opinion 18/2025 on a draft joint controllership arrangement between the European Central Bank and National Competent Authorities in the context of the Single Supervisory Mechanism
Formal comments on the draft Commission Implementing Regulation laying down detailed specifications regarding the functional requirements for eFTI platforms in accordance with Regulation (EU) 2020/1056 of the European Parliament and of the Council.
56th meeting of the EDPS and the Data Protection Officers of the EU institutions, bodies, offices and agencies at the Conseil of the European Union, Brussels, 2 July 2025.
EDPS Formal comments on the draft Commission Implementing Regulation on establishing the technical specifications and other requirements for the decentralised IT system, referred to in Regulation (EU) 2023/1543 of the European Parliament and of the Council.
Article 42 of Regulation (EU) 2018/1725 requires the EDPS to be consulted on proposals for legislative and other acts with an impact on the protection of individuals’ rights and freedoms with regard to the processing of personal data. The purpose of this guidance is to offer practical advice to the Commission, European Parliament and Council on the main elements to consider with regards to legislative proposals and other acts that imply the processing of personal data.