Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.
The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.
The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.
Presentation of EDPS Tasks and Activities, Speech by Wojciech Wiewiórowski before the Committee on Civil Liberties, Justice and Home Affairs, European Parliament, Brussels
EDPS joint comments on three draft Decisions of the Chair of the Single Resolution Board on internal rules concerning restrictions of certain rights of data subjects.
EDPS joint comments on three draft Decisions of the BEREC Board of Regulators and the BEREC Office Management Board concerning implementing rules on data protection and internal rules on the provision of information to data subjects and the restriction of certain rights of data subjects.
EDPS comments on the European Centre for Disease Prevention and Control (ECDC) draft internal rules concerning restrictions of certain rights of data subjects in the framework of the functioning of the ECDC.
Under Article 39(4) of Regulation (EU) 2018/1725, the EDPS shall adopt a list of the kinds of processing operations subject to a data protection impact assessment (DPIA). Under paragraph 5 of the same Article, the EDPS may adopt a list of the kinds of processing operations not subject to a DPIA. For further information on how to use this list, please see the Accountability on the ground toolkit.