Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.
The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.
The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.
56th meeting of the EDPS and the Data Protection Officers of the EU institutions, bodies, offices and agencies at the Conseil of the European Union, Brussels, 2 July 2025.
EDPS Formal comments on the draft Commission Implementing Regulation on establishing the technical specifications and other requirements for the decentralised IT system, referred to in Regulation (EU) 2023/1543 of the European Parliament and of the Council.
Article 42 of Regulation (EU) 2018/1725 requires the EDPS to be consulted on proposals for legislative and other acts with an impact on the protection of individuals’ rights and freedoms with regard to the processing of personal data. The purpose of this guidance is to offer practical advice to the Commission, European Parliament and Council on the main elements to consider with regards to legislative proposals and other acts that imply the processing of personal data.
The EDPS Annual Report 2024 is about acting for the future of data protection, preparing for the diverse possibilities and risks that the digital landscape presents.
Guided by our 2020 - 2024 strategy and its principles: Foresight, Action and Solidarity, the EDPS has: unveiled and taken steps to start executing its Strategy for AI, monitored and analysed technologies, including AI- led technologies, advised EU-co legislator on upcoming EU regulations directly impacting people’s privacy and data protection, providing tools to EUIs to ensure their compliance with EU data protection laws, influence the development of data protection globally.
EDPS Supervisory Opinion 3/2025 on the draft decision of the management board of the European Insurance and Occupational Pensions Authority (EIOPA) adopting implementing rules for the application of regulation (eu) 2018/1725, including rules concerning the data protection officer.