EDPS

#InCaseYouMissedIt: Website compliance made easy

Ever wonder what happens behind the scenes when you visit a webpage 🛜 ?

Cookies 🍪 , trackers 📍 and third-party requests 📑 constantly interact with your personal data. To bring transparency to the web, we developed the 🖥️ Website Evidence Collector (WEC). Originally launched in 2018, this free, open-source tool automatically maps and records browser activity during a site visit, making it easy for website owners and developers to audit their own privacy compliance.

For the 🇪🇺 EU public sector, we also offer WEC Online, an exclusive platform built for EU institutions, bodies and agencies to run these 🔎 privacy inspections automatically and at scale. Whether you want to audit your own site or just understand how digital privacy works, we’ve got you covered.

#ICYMI, learn more about how to use these two tools: 🔗 https://link.europa.eu/cmngKG

@Supervisor@social.edps.europa.eu Wojciech Wiewiórowski

Today, on 9 May we commemorate the 76th anniversary of the ‘Schuman Declaration’, a historic milestone towards the project of 🕊️ freedom, 🤝 unity and ⚖️ shared democratic values that millions of Europeans enjoy today.

Though technology has radically changed since 1950, the values of unity and cooperation that inspired Robert Schuman then remain at the core of our mission: to safeguard privacy as an essential condition for human dignity.

Let’s trace the roots of Europe Day back. Through one of the first attempts to protect people’s personal data in a digitalising world.

We are proud and grateful to continue this legacy by championing data protection as a cornerstone of European values every day.

🎈 Happy Europe Day everyone!

Ten years ago, the adoption of the General Data Protection Regulation (#GDPR) marked a milestone for privacy and data protection in Europe.

Built on decades of work since the Data Protection Directive 95/46/EC, the GDPR created a modern, harmonised system fit for the digital age - strengthening individuals’ rights, reinforcing accountability, and shaping a common approach across the EU 🇪🇺.

Over the past decade, it has proven its value: giving people greater control over their personal data, fostering trust in the digital economy, and inspiring similar frameworks around the world.

As we look ahead, preserving this achievement remains essential. In the context of ongoing simplification efforts, the EDPS has emphasised that efforts to streamline rules should maintain a high level of protection and legal certainty.

Ensuring clarity, consistency, and strong safeguards will be key to keeping Europe at the forefront of data protection in the years to come.

📖 Read more about the history of GDPR: https://link.europa.eu/dFPdmX

📨 In your inbox: EDPS Newsletter

Welcome to the latest edition of the EDPS Newsletter! This bumper edition takes in AI in the workplace, stronger safeguards for automated systems, and advice spanning digital identity, borders and health data.

Read and get informed on:

🤝 The EDPB's high-level meeting in Dublin, where supervisory authorities called for a clear legal basis allowing regulators to share enforcement-relevant information across their different areas of competence.

🎓 Our trainees' conference at the European Parliament on algorithmic hiring, asking how candidates can exercise control, consent and transparency when AI screens their applications.

🤖 AI literacy as a basic civic competence, in a new Espresso with #EDPS, plus our practical checklist helping EU institutions assess whether human oversight of automated decisions is meaningful or merely nominal.

🌍 Global engagement at the G7 Roundtable of data protection and privacy authorities in Paris, with joint positions on privacy-preserving age assurance and children's data.

🛡️ And plenty more: the 58th EDPS-DPO network meeting, our first ARETE training on assessing the risks of data breaches to individuals, renewed cooperation with the EU Agency for Fundamental Rights, and latest EDPS opinions.

Read it here: https://link.europa.eu/P9KhhB

And remember to subscribe: https://link.europa.eu/QRQkwd

#InCaseYouMissedIt: Data Protection Checked 🔐✅

Our mission is built on a commitment to upholding the highest standards of data protection across all EU institutions, bodies and agencies (EUIs) 🏢.

By guiding Data Protection Officers, issuing supervisory opinions and conducting regular audits or investigations, we help EUIs to meet their obligations. 🔍 This supervisory role extends far beyond EU borders, too. Our decisions authorise transfers of personal data from EUIs to third countries and international organisations.

All these actions ensure that individuals' rights are respected while enabling EUIs to fulfil their public missions effectively.

#ICYMI, read more about our latest supervisory work and impact here:
🔗 https://link.europa.eu/8BKKXk

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski

What is hiding behind the world’s most famous landmarks?

Behind every iconic monument lies a timeless lesson. With our cybersecurity lens 🥸 , we see what these architectures can teach us about protecting our personal data.

🧱 Petra survived through the centuries because it was protected and preserved.

Your data should be too. Secure what truly matters: your files, photos, and important documents. Regularly back them up to a trusted cloud service or separate device – ideally with one backup kept offline. If ransomware or hardware failure strikes, a recent backup can be the difference between recovery and permanent loss.

🌋 Pompeii tells a different story: abandoned, frozen in time and buried.

Forgotten digital accounts also contain treasures of personal data waiting to be discovered. Old online accounts you no longer use can quietly become easy targets for attackers, especially if they still contain personal data or outdated passwords. Instead of leaving them behind, take time to delete them properly and download any important information first.

Your digital life 📱works the same way. Stay safe online!

#InCaseYouMissedIt: Shaping the EU’s digital future 🚀

At the EDPS, fostering a strong data protection culture is our priority 🛡️.

Beyond supervision, we act as an adviser. Through our formal or informal comments as well as own-initiative and joint opinions with the EDPB, we review new legislative proposals that potentially impact the fundamental rights ⚖️ of all citizens of the EU.

In 2026, we continue working on various topics that have an impact on your daily life.

#ICYMI, discover more here: https://link.europa.eu/JQPMTJ

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski

*** Managing Shadow AI's Hidden Data Breach Risk ***

The new blogpost by @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski is out!

Shadow AI is the use of unauthorised AI tools by staff without their organisation's knowledge or approval. The risks are significant: personal data can leak into systems with no legal basis for processing, no oversight on where it goes, and no way to fulfil individuals' rights. Security backdoors can open without IT teams ever noticing.

How can EU institutions respond?

☑️ Clear AI governance policies,
☑️ Technical controls,
☑️ Compliant alternatives to unapproved tools, and
☑️ Ongoing staff training.

Protecting data and embracing innovation are not in conflict, but clear governance is key.

▶️ Read the full blogpost: https://link.europa.eu/bTJvkV

*** #Ireland2026EU ***

On 1 July 2026, Ireland takes over the rotating Presidency of the Council of the European Union.

The EDPS welcomes the start of the Irish Presidency, its intention to foster a broader reflection on EU digital policymaking and ambition to reach an agreement on the forthcoming amendments to the EU Data Protection Regulation for EU institutions and bodies (EUDPR).

In a time of transformative technological change, strengthening the EU’s capacities in cloud computing and artificial intelligence, while advancing the Union’s approach to responsible digital governance, remains a crucial priority.

We also look forward to close cooperation with the Presidency and EU institutions on key digital and justice and home affairs files, including cybersecurity, tech sovereignty and digital connectivity. In this context, innovation, security and competitiveness must go hand in hand with strong safeguards for privacy and fundamental rights.

The protection of minors online will be a particularly important area of focus in the months ahead, requiring effective and future-proof solutions that ensure a high level of protection for children and their personal data in the digital environment.

Best wishes to the Irish Presidency of the Council of the European Union 2026.

*** ARETE: EDPS launches new training exercise on risk assessment in personal data breaches ***

The EDPS is hosting the 1st edition of ARETE - the Assessment of Risk to individuals of pErsonal daTa brEaches; a training exercise designed to strengthen risk assessment capabilities across EU institutions, bodies and agencies.

Building on the PATRICIA I, II and III exercises and the EDPS Data Breach Awareness campaign, ARETE focuses on one of the most complex aspects of breach management: assessing the risks a breach creates for individuals and their fundamental rights, often under time pressure and with incomplete information.
The training brings together DPOs, data controllers, IT and compliance officers for a programme combining expert-led sessions on risk assessment with hands-on learning through realistic case studies and a dedicated automated tool.

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski opened the worskhop underlining:
"Risk assessment sits at the centre of those decisions. It enables organisations to understand the potential consequences of an incident, to prioritise their response and, where necessary, to communicate openly with the individuals concerned. Most importantly, it ensures that decisions are based on evidence and can be clearly explained and justified."

Learn more about
📃PATRICIA I: https://lnkd.in/et8uPgwa
📃 PATRICIA II: https://lnkd.in/em9pCzaf
📃 PATRICIA III: https://lnkd.in/eysjSfy6
📃ARETE - Assessment of Risk to individuals of pErsonal daTa brEaches
https://lnkd.in/eYSvRu5k

🗃️ Artificial intelligence is increasingly embedded in recruitment and HR processes, from CV screening and candidate ranking to automated decision-support tools. While these technologies can improve efficiency, they also raise important questions around transparency, fairness and the protection of personal data

At the EDPS/EDPB trainee conference, taking place on 9 July 2026, experts from EU institutions and the private sector will discuss:

- The use of AI in recruitment and candidate assessment
- The implications for data protection and fundamental rights
- Transparency and accountability in automated decision-making
- The future of AI-driven HR practices in Europe

📍 European Parliament (Brussels)
💻 Hybrid

🔗 Register here: https://link.europa.eu/XGFg6Y

Our Blue Book trainees have reached the end of their five-month traineeship at the European Data Protection Supervisor (EDPS) 🏛️ . In this special episode of #EDPSonAir, they look back on what they worked on, what they achieved, and what they are taking away from the experience.

In this episode:
🔷 What the Blue Book Traineeship is really like from the inside
🔷 What surprised them about working in an EU institution
🔷 How they organised the trainee-led conference, ‘Hired by an Algorithm’ on the use of AI in modern HR practices

Curious about what it is like to be a Blue Book trainee? Want to hear more about their conference on AI in hiring?

🎧 Tune in here: https://link.europa.eu/m38xfp

👉 Applications for the next #BlueBookTraineeship are open. Apply to take the next step in your EU journey!

This is the story your digital habits reveal – EU citizens in control of their data

Browsing, swiping or chatting on social media platforms is part of daily life for 89% of young people between 16 and 29 years old. But here is the shift. According to Eurostat in 2025, 76.9% of consulted EU citizens actively managed access to their personal data 🛠️ .

So what does that mean?
More awareness, more choices, more power over their own data.

In this series, we share how people across the EU are protecting themselves in an online world. One of the strongest actions someone can take is to refuse the use of personal data for advertising. 📋️ More than 58% surveyed people chose not to allow their personal data to be used for advertising.

Your right to object can be exercised at any time. You can object to the processing of your data, and you also have the right to object to a decision based on an automated process, such as profiling, if it might significantly affect you.

So what about you? How do you protect your personal data online?

✅️ More about your rights in the EU: https://lnkd.in/dyEH_9pu
📊 Explore the survey data: https://lnkd.in/dBWBBZJk

*** Joint exchange with UNESCO and Instituto Alana ***

Today, the European Data Protection Supervisor welcomed a high-level delegation from Brazil for a structured technical visit on the protection of children's rights online. 🧑‍💻

The delegation brought together by UNESCO and Instituto Alana under their Global Missions for Governance and Safe Digital Environments initiative included decision-makers from Brazil's Executive, Legislative and Judicial branches, as well as regulatory authorities and civil society representatives. Their mission: to exchange experiences on policies and governance approaches protecting children and adolescents in the digital environment.

Supervisor Wojciech Wiewiórowski opened the meeting with institutional remarks, setting the scene for a half-day of substantive dialogue between the Brazilian delegation and representatives from the EDPB and EDPS, including experts from our Policy & Consultation and Supervision & Enforcement units.

Exchanges like today's matter. The work of European data protection authorities offer concrete insights for emerging regulatory systems: on age assurance, on enforcement architecture, on how to put the child's best interest at the centre of digital policy.

🌐🤝 International cooperation on children's rights in the digital environment is not a courtesy — it is a necessity.

*** Hired by an Algorithm: Data protection and AI regulation in modern HR practices ***

Today, the EDPS and European Data Protection Board trainees had the pleasure of hosting the conference “Hired by an Algorithm: Data protection and AI regulation in modern HR practices”.

Τhe EDPS @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski opened the conference delivering the opening remarks addressing how AI is shaping recruitment and human resources.

The Supervisor stated: "Efficiency should never come at the cost of unfairness, discrimination and structural bias. We are approaching a recruitment landscape where AI meets AI, well before a human enters the picture at all".

The EDPS @Secretary_General@social.edps.europa.eu Leonardo Cervera-Navas took the stage bringing a variety of perspectives. In his Keynote speech, he highlighted how AI in hiring practices requires striking a careful balance between risk and reward. "Without human oversight, AI hiring tools could exacerbate existing biases and further alienate minorities. Nevertheless, current hiring practices are unsustainable without technological support and could impede hiring and work of organisations. We need to approach this with a human-centric view of new technologies, while remembering that the European values and citizen’s data privacy should remain at the forefront of our decision-making".

The panel titled ‘From application to selection’ moderated by Maria Lydakaki featured prof. Christopher Kuner, Mario Guglielmetti, Amandine Jambert, and Meropi Voyatzi. The discussion looked into the potential of AI technologies, alongside the challenges they bring in ensuring data protection, transparency, and respect for individuals’ rights.

The conference concluded with closing remarks by Isabelle Vereecken, Head of the EDPB Secretariat, who addressed the audience with perspectives on data protection, the use of personal data by AI tools, the benefits and the risks when assessing candidates.

🔎 What is hiding behind the world’s most famous landmarks?

Behind every iconic monument lies a timeless lesson. With our cybersecurity lens, we see what these architectures can teach us about protecting our personal data.

3 landmarks, 3 tips

🗼 Even engineering marvels such as the Eiffel Tower need constant upkeep, just like your software. Keep software and devices updated. Enabling automatic updates helps ensure you always have the latest protection in place.

🏯 The history of the Great Wall of China reveals the limits of high defences. Over time, even the strongest fortifications get breached. Clean out your inbox regularly. Organising old emails, clearing junk messages and unsubscribing from newsletters you no longer read helps reduce clutter and makes suspicious messages easier to spot.

⚱️Hidden chambers in pyramids were built to keep things private. So does private browsing. Use private browsing when you want fewer digital traces left behind. It can help to limit the traces left behind on your device by preventing browsing history, cookies and temporary data from being stored after your session ends.

A cleaner, updated digital space makes threats easier to detect and reduces opportunities for attackers.

✅Update software and devices.
✅Declutter your inbox.
✅Use private browsing.

Even iconic structures would fail without maintenance. What are your cybersecurity habits?

*** Checklist on human intervention on automated decision-making (ADM) ***

Automated decision-making systems are increasingly impacting on individuals' fundamental rights and freedoms, from access to services to legal outcomes. Human oversight is often proposed as the key safeguard. But is it always as effective as we think?

Our #TechDispatch on Human Oversight of Automated Decision-Making digs into the common misconceptions around this topic.

--- Now, we are taking it a step further ----

We have published a practical checklist for EU institutions to self-assess the maturity of their human oversight measures.

Human oversight should be clearly defined, documented, proportionate to the risk level and backed by real organisational and technical safeguards.

Read more https://link.europa.eu/K3RDTd

On 8 June, the #EDPS @bfdi@social.bund.de and @BayLfD@social.bund.de organised a high-level debate in Brussels on the @EUCommission@ec.social-network.europa.eu Omnibus proposals and their implications for the #GDPR and the broader EU digital regulatory framework.

Representatives from the European Parliament, the Council, the European Commission, EDPB, national and regional data protection authorities, academia, civil society and the private sector came together for a forward-looking exchange on legal certainty, regulatory coherence, the preservation of the GDPR's level of protection, fundamental rights, innovation and competitiveness.

🎬 Watch the full recording of the event, it’s now available https://link.europa.eu/m7hJQY

In the week of Privacy Symposium in Venice, @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski met with Sirpa Rautio, Director of the EU Fundamental Rights Agency The meeting was an opportunity to discuss shared topics and reaffirm the strong cooperation between the two institutions on the protection of fundamental rights.

All European institutions 🇪🇺 will open up their doors on 9 May this year. Together with the European Data Protection Board, we look forward to meeting you in the premises of the European Parliament in Brussels.

Invite friends and family to join and participate in activities, challenges and exciting discussions.

🗓️When: 9 May 2026
📍Where: European Parliament

👋Meet Europe in one place. Save the date!
More info: https://link.europa.eu/YFthbQ

*** G7 Data Protection Week ***

The EDPS is in Paris this week for the G7 of Data Protection and Privacy Authorities, participating in a series of discussions and roundtables.

The @cnil@social.numerique.gouv.fr welcomes G7 Data Protection Authorities' delegations ahead of the week's proceedings.

Yesterday, @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski attended the high-level roundtable on children's safety and privacy online, co-organised by the OECD and the CNIL under the French G7 Presidency.

The event brought together data protection and online safety authorities from across OECD countries to identify effective strategies for protecting children in the digital environment.

Today, Wojciech Wiewiorowski joins the Privacy Research Day to deliver a keynote speech at the 5th edition of this international event bridging academic research and regulatory practice.

The EDPS is committed to contributing to this global effort, sharing expertise, aligning approaches, and working with legislators, technologists, industry and civil society to protect children and fundamental rights.

*** Hired by an Algorithm: Data protection and AI regulation in modern HR practices ***

From CV screening to candidate evaluation, AI is becoming an integral part of recruitment and HR processes. While these technologies offer new opportunities, they also bring significant challenges for data protection, transparency, accountability, and individuals' rights.

Today's conference, organised by #EDPS and European Data Protection Board trainees, gathers experts from EU institutions and the private sector to examine how AI is shaping hiring practices and to discuss the safeguards needed to ensure responsible and trustworthy use of these technologies.

Key topics include:

🟣AI in recruitment and candidate evaluation
🟣Data protection and fundamental rights
🟣Transparency in automated decision-making
🟣The evolving regulatory landscape for AI in HR

🎥 Follow the conference live at 14:00: https://link.europa.eu/6h79vc

📅 Today’s programme is here: https://link.europa.eu/Cc3XQp

*** High-level Debate: “From Omnibus to Opportunity: Driving Data Protection and Innovation” ***

Today, the EDPS, the German Federal Commissioner for Data Protection and Freedom of Information (@bfdisocial.bund.de), and the Data Protection Authority for the German state of Bavaria (@BayLfD@social.bund.de) co-organised a high-level debate titled titled “From Omnibus to Opportunity: Driving Data Protection and Innovation”.

The event brought together distinguished speakers, including Joachim Herrmann and Anu Talus who opened the event. During the panel debate, moderated by Dr. Johannes Baumann, we had the pleasure of welcoming Wojciech Wiewiórowski, Marina Kaljurand, Michael McNamara, Renate Nikolay, Machi Tsokou, Andreas Hartl and Victoria de Posson. The event concluded with closing remarks by Thomas Petri and @Secretary_General@social.edps.europa.eu Leonardo Cervera Navas.

Discussions focused on legal certainty, regulatory coherence, the preservation of the GDPR’s level of protection, and ways to foster innovation and competitiveness while safeguarding fundamental rights in the European Union.

@Supervisor@social.edps.europa.eu Wojciech Wiewiórowski said: “The Omnibus proposals have started an important conversation, but it has not finished it. […] Getting the interplay between EU digital laws right is not a technical nicety but a matter of fundamental rights and regulatory effectiveness.”

Additionally, the Supervisor welcomed genuine simplifications such as the scientific research definition, streamlined data breach notifications/DPIAs, and the modernisation of ePrivacy rules, but cautioned against changes that lower protection under the guise of simplification.

He said: “Any modification to the definition of personal data that goes beyond codifying CJEU case-law risks legal uncertainty and reduced protection for individuals.”

Resilient economies require trust, and trust requires robust protection of personal data, concluded Mr Wiewiórowski.

*** UN Global Dialogue on AI Governance - Roundtable ***

"AI Foundation: Digital Trust and AI Infrastructure for All". Under this topic, the EDPS Secretary General Leonardo Cervera-Navas also took part in the high-level roundtable at the UN Global Dialogue on AI Governance, bringing together senior decision-makers from industry, government, and standards communities.

The @Secretary_General@social.edps.europa.eu underlined that computing power and data are not solely technical components, but pillars of sovereignty, both national and European. In recent years, some have perceived technological sovereignty as a form of protectionism, but for the EU it is about ensuring that AI and data generated within Europe are converted into real value for its companies and citizens, while being processed in accordance with fundamental values and applicable legislation.

"We need to reshape the conversation on AI from the technical towards to a human-centric discussion. Against the concentration of wealth and power, we need to support sovereignty, moral purpose and responsibility" said Leonardo Cervera-Navas.

** 58th EDPS-DPO meeting ***

The 58th EDPS-DPO meeting starts now!

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski opened the meeting, hosted by the six #DPOs of the Commission's Executive Agencies, with a wide-ranging address on DPO independence, enforcement, and the challenges ahead.

He recalled two cases in which DPOs of EU bodies were dismissed before the end of their term without the prior consent of the #EDPS, as required by law. Following these cases, the EDPS issued Supervisory Guidance on the role of DPOs and adopted a decision establishing clear and binding procedures related to the EUDPR requirements of EDPS's prior consent.

"If a DPO can be removed for doing the job, then no DPO can do the job," he underlined, reaffirming the EDPS's commitment to defending DPO independence wherever it is threatened.

On complaints, the Supervisor highlighted structural growth: 133 admissible complaints received in 2025, a 23% increase year-on-year. He also flagged the rising impact of generative AI, which is directing thousands of complaints to the wrong authority and producing submissions of unprecedented length and complexity.
#EUDPR #dataprotection #DPO

*** Memorandum of Understanding EDPS-FRA ***

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski and Sirpa Rautio, Director of the European Union Agency for Fundamental Rights (FRA), signed an updated memorandum of understanding.

The MoU intends to renew the commitment to increase cooperation to enhance the protection of fundamental rights of individuals.

We look forward to continuing such a key cooperation!

Read here https://link.europa.eu/mCHpPX

We have reached the final story in our series highlighting women shaping data protection at the heart of the EU.

🌍🤖 Today, we meet Sonia, Head of Artificial Intelligence Unit, working at the intersection of data protection and the most transformative technologies of our time.

And yet, her perspective brings us back to something essential:

“Despite working at the Artificial Intelligence Unit, I would say that natural intelligence is unbeatable. […] The interactions with experts in-house have enriched me professionally – and that’s the best, and the most rewarding part of working here.”

People are behind every system, every investigation, every technological shift. Learning from each other. Challenging each other. Building something that protects others.

🎬 Re-visit all the videos and meet some of the women behind our work.

📌 Check our Careers page to learn more about us: https://europa.eu/!xTQBYV

*** G7 Data Protection Authorities Roundtable - Paris 2026 ***

G7 of Data protection and Privacy authorities gathered in Paris on 25-26 June, hosted by the @cnil@social.numerique.gouv.fr under the French G7 Presidency.

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski took part in this high-level roundtable, which focused on the protection of minors online, emerging technologies, and international enforcement cooperation.

Two key documents were adopted:

✅ Statement on privacy-preserving age assurance calling for purpose limitation, privacy by design, and data minimisation

✅ Joint paper on connected home devices and children's data protection.

Discussions also covered agentic AI, smart glasses, and the growing challenges posed by automated decision-making.

The next G7 DPA Roundtable will take place in the United States in 2027, under the chairmanship of the FTC.

🔗 Read the press release and the adopted documents https://link.europa.eu/vYrMM7

*** EDPB High-Level Meeting in Dublin - PRESS RELEASE ***

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski took part in two days of intensive work at the EDPB High-Level Meeting in Dublin, discussing cross-regulatory cooperation and strengthening consistency in enforcement.

Following the meeting, supervisory authorities called for a clear legal basis for cross-regulatory information sharing, so that regulators can exchange information relevant to enforcement across their respective areas of competence.

📃 Read the full EDPB press release here https://link.europa.eu/vpRBhn

#EDPBDublin2026

*** G7 Data Protection - Keynote Speech - TechSonar & TechDispatch ***

At the Privacy Research Day in Paris, part of the G7 Data Protection Week, @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski delivered a keynote on TechSonar and TechDispatch, the two EDPS' foresight tools for monitoring emerging technologies and their impact on fundamental rights.

Launched in 2021, #TechSonar identifies technology trends likely to see significant growth in the next three to four years, examining their potential effects on individuals, both positive and negative.

Where a technology shows concrete, high-impact applications, the EDPS goes deeper with a #TechDispatch, a focused analysis of a single technology, its privacy implications, and further reading for those who want to deepen their knowledge.

The Supervisor noted: "technology doesn't develop in a vacuum and initiatives like TechSonar and TechDispatch are a step towards proactive, informed dialogue on how to safeguard rights in a rapidly changing landscape".

❔ Do you want to learn more?

📃 Discover TechSonar and TechDispatch https://link.europa.eu/96kY4x

#EDPS has just launched a pilot project for an AI regulatory sandbox🚀.

Under the #AIAct, the EDPS as supervisory authority may establish a regulatory sandbox. We have decided to seize this opportunity.

As market surveillance authority for the EU public administration, our objective is to provide a safe space to develop, train, test, and validate AI systems against the requirements of the AI Act. Leading by example is key, especially as many existing systems in the EU public sector will not fall under the AI Act before 2030.

For this pilot, we are working with the European Commission's Directorate-General Human Resources and Security on an AI system designed to support job matching in EU selection procedures. The system aims to assist recruiters in identifying suitable candidates for interviews and reduce the risk of bias.

This initiative has a dual purpose:
💡providing concrete guidance on compliance challenges for specific AI use cases; and
🛠️stress-testing our own readiness to design and operate a fully-fledged AI regulatory sandbox, both in terms of expertise and technical infrastructure.

The story your digital habits reveal – EU citizens in control of their data

AI is reshaping how we search for information, work or navigate daily tasks. The latest numbers by #Eurostat showcase that in 2025, a third of people surveyed in the EU used generative AI.

But the real story is how:

🧑‍🎓 62% of young people are using it to support their education, from understanding complex topics to drafting ideas.

💼 Over 50% of working-age adults rely on AI for professional tasks.

While the uptake of AI is not equal across the EU, it is increasing everywhere, with countries like Denmark 🇩🇰 , Estonia 🇪🇪 , Malta 🇲🇹 and Finland 🇫🇮 leading the way. But why the growing urge to use it? AI is a part of everyday life: from powering tools across business, to education, to entertainment. But with speed comes important questions about automation, trust, and even fundamental rights.

In our latest edition of the TechSonar, we took a focused look at AI trends, exploring not just the risks of technologies shaping the future but the real-world impact they are already having today.

📖 Read more here: https://link.europa.eu/RWFydW
🎧 Pick the topic and have a listen: https://link.europa.eu/HDDrwf
📊 Explore the data: https://link.europa.eu/PFnBxK

*** Human dignity in the age of data: the pending social contract ***

The EDPS @Secretary_General@social.edps.europa.eu Leonardo Cervera-Navas joined a panel at Universidad Pontificia Comillas exploring how data protection, digital sovereignty and AI governance can keep human dignity at their core.

He set out why European technological sovereignty will not emerge from deregulating away our fundamental rights. The real obstacles to competitiveness are a fragmented digital market, underdeveloped capital markets, cultural risk-aversion and talent gaps, not strong data protection rules.

Europe has built a rulebook that treats data and dignity as inseparable. The next step is to activate it.

Digital sovereignty means the capacity to uphold our own fundamental-rights standards, reinforcing, rather than replacing, the safeguards owed to people.
The protection of fundamental rights and innovation are not opposites. Trust is at the basis of resilient economies, and building it requires genuine cooperation with industry and civil society, not a zero-sum game with a single winner.

"Until we build a sovereign, ethically aligned technical stack that serves the public good, our digital humanism will remain reactive: a set of laws regulating technologies built elsewhere, rather than a living infrastructure designed by and for Europeans" the Secretary-General concluded.

Read the speech https://lnkd.in/eju4gtJV

🧬 The European Biotech Act aims to strengthen Europe’s biotechnology and biomanufacturing sectors by simplifying the regulations and updating the rules for clinical trials.

Together with European Data Protection Board, we express our support for harmonising the clinical trials process across the EU 🇪🇺 .

But one thing is clear: 🔒 strong safeguards for the sensitive health data and genetic data of trial participants are non-negotiable. Simplification must never come at the expense of protecting their data.

Our key points:️

• clearly define the roles for funders and conductors of clinical trials
• limit the 25-year data retention requirement to essential data only
• define strict conditions for re-use of trial data
• align with the AI Act
• use pseudonymisation wherever possible
• set clear legal grounds for the use of sensitive data in regulatory sandboxes

📈 Enabling innovation is critical for the future of EU biotech, but that should not undermine data protection.

Read more: https://link.europa.eu/hYtkft

📨 Welcome to the latest edition of the EDPS Newsletter!

This time around, we have a focused look at new regulatory roles and legislative safeguards. Read and get informed on:

🤖 The launch of the EDPS Compass, which sets out our new responsibilities under the AI Act as the market surveillance authority for AI systems across EU institutions.

🤝 Our joint opinions with the European Data Protection Board (EDPB) on the European Biotech Act and the EU Cybersecurity package, ensuring that innovation in health and digital resilience doesn't undermine fundamental privacy rights.

💡 Expert reflections from the Supervisor on the value of prior consultations, especially within justice and law enforcement

🏙️ An invitation to upcoming events. Celebrate Europe Day with us on 9 May, and a save-the-date for our high-level debate on the Digital Omnibus in June.

Read more here: https://link.europa.eu/kVVGrG

And remember to subscribe: https://link.europa.eu/QRQkwd

From the future of the EU’s digital rulebook to cross-border healthcare, AI-powered visa services, and transparency in EU spending, this edition explores some of the biggest data protection questions shaping Europe today.

New episode of #NewsletterDigest 🎙️steps into four different dimensions of data protection:

💬 What does ongoing debate over the European Commission's Digital Omnibus package mean for the future of the EU digital landscape?
💬 How are we working to protect sensitive health data as healthcare becomes more accessible across borders?
💬 What we think needs to happen before an AI chatbot goes live for the EU’s new visa application platform.
💬 What challenges might arise when harmonising financial reporting across different EU funds?

Listen now and stay up to date with the latest developments in data protection and digital policy.

🎧 https://link.europa.eu/QbnjRg

*** G7 Roundtable of Data Protection and Privacy Authorities ***

Today and tomorrow, Supervisor Wojciech Wiewiorowski with the EDPS delegation participates in the G7 Roundtable of Data Protection and Privacy Authorities, joining the competent authorities of Canada, France, Germany, Italy, Japan, the United Kingdom, the United States and the European Data Protection Board.

Established in 2021, the Roundtable serves as a forum for strategic cooperation to exchange information on legal, technological and operational developments, facilitating dialogue between the heads of authorities, and seeking common positions on matters of shared interest.

Under the French G7 Presidency, this year's discussions focus on three priorities:

☑️ emerging technologies,
☑️ law enforcement cooperation,
☑️ free movement of data.

Today, @Supervisor@social.edps.europa.eu Wojciech Wiewiorowski met with Jan Braathu, OSCE Representative on Freedom of the Media, for an exchange of views on the intersection of privacy, data protection and media freedom.

The EDPS continues to engage with international partners to ensure that discussion on fundamental rights and freedoms remain at coreof the global digital agenda.

🚀 Today, we kicked off the third edition of our table-top cybersecurity exercise, PATRICIA III. This initiative aims to raise awareness about personal data breaches 🚨 and foster collaborations among key staff in the EU institutions staff, including IT personnel, Data Protection Officers (DPOs) and Security Officers.

This year, the exercise was tailored to the @EUCommission@ec.social-network.europa.eu. We welcomed 70 participants from 11 different European Commission departments to simulate cybersecurity incidents and exchange knowledge and best practices. Working together, they tested their incident response capabilities and risk mitigation strategies in handling personal data breaches.

The exercise was opened by @Supervisor@social.edps.europa.eu who pointed out that personal data breaches have evolved and are increasingly targeted, coordinated and driven by sophisticated actors. He emphasised the importance of collaboration to improve our ability to respond and build a culture of preparedness, accountability and cooperation.

"This exercise is another step forward in our joint mission to protect not just data, but the people behind the data and the trust they place in us" added Supervisor.

PATRICIA III is part of the EDPS's broader goal to support EU institutions in being proactive, coordinated and confident when it comes to personal data breach management.

🔗 More information here: https://link.europa.eu/mjnfPG

The latest Newsletter Digest takes a look at three important recent developments:

🤖 a new strategic document setting out how we plan to supervise AI across EU public administration

🔐 an EDPS-EDPB joint opinion on Europe’s cybersecurity package

🧫 the recommendations on the proposed European Biotech Act and what it means for health data

We also let you know about a couple of dates to put in your calendar: EU Open Day on 9 May 2026, and the High-Level Debate: “From Omnibus to Opportunity: Driving Data Protection and Innovation” on 8 June 2026.

Listen wherever you get your favourite podcasts: https://link.europa.eu/DJC9rp

Subscribe to our monthly EDPS Newsletter: https://link.europa.eu/QRQkwd

In your inbox: the EDPS Newsletter

Welcome to the latest edition of the EDPS Newsletter! As we move forward into a busy summer, this comprehensive issue brings you a detailed overview of active AI governance, crucial digital regulation debates and major institutional milestones. From the key findings of our newly released Annual Report to critical privacy questions surrounding public sector AI deployment, data tracking and cross-border health networks, we dive deep into the developments shaping the EU’s digital rulebook.

Read and get informed on:

🎓 The EDPS-EDPB trainees’ conference on 9 July, which will examine the data protection risks of automated algorithmic tools, such as CV screening and video interview analysis, in modern HR hiring practices.

📊 The EDPS Annual Report 2025, documenting a record year of supervisory and consultation activity, the launch of our AI Unit, and key investigations into large-scale IT systems.

⚖️ Insights from our high-level legislative debate on the EU's Digital Omnibus proposals and why simplification must not undermine the protective force of the GDPR.

🤖 Our advice on the upcoming EU visa platform chatbot, stressing the need for strict knowledge boundaries and human-led alternatives.

🤓 Global engagement and expert insights, featuring our presence at CPDP 2026, a look back at EU Open Day, comments to safeguard MyHealth@EU data, an opinion on EU budget tracking, and a new framework for medicine safety data transfers.

Read it here: https://link.europa.eu/DXJtwN

And remember to subscribe for free: https://link.europa.eu/QRQkwd

Whether you prefer reading or listening, explore a wealth of insights into our work. News episode on Newsletter Digest is out. Today, we are focusing on three key developments shaping the future of data protection in Europe:

🎙️ the AI Act moving into practice
🎙️ new regulatory proposals where fundamental rights are at stake
🎙️ fresh initiatives to strengthen data protection governance within EU institutions

Listen wherever you get your favourite podcasts: https://link.europa.eu/QbkJVr

PS: Subscribe to our monthly EDPS Newsletter: https://link.europa.eu/QRQkwd

Thinking of a career in data protection but not sure where to start? Here is your chance to gain valuable experience at the heart of data protection and privacy in the EU with a traineeship at #teamEDPS.

Do you have:
🎓 a completed standard 3-year higher education degree;
🗣️ very good knowledge of languages; and
⏳ no more than 6 weeks of prior experience in EU institutions, bodies and agencies?

Then this opportunity might be perfect for you!
Apply: https://link.europa.eu/NH7rhV

New blog post is out - Prior consultations, zero surprises: early oversight in action.

In the world of law enforcement ⚖️ and judicial cooperation, data processing can have far-reaching consequences for individuals. It's important that police and judicial authorities to identify issues before they arise.

That’s why 'prior consultations' with supervisory authorities are vital instruments for accountability and prevention.

Our latest blog post explores how a structured dialogue between such organisations and the EDPS ensures that fundamental rights remain at the heart of changes to operational matters in the Area of Freedom, Security and Justice, ensuring:

✔️ Legal certainty
✔️ Proactive prevention
✔️ Consistent standards
✔️ Safe innovation

In 2025, the EDPS successfully concluded ten prior consultations for Europol and Eurojust, on topics ranging from AI toolboxes to international crime databases, all within strict legal deadlines. This highlights that even in sensitive, fast-moving environments, independent oversight and operational efficiency can go hand in hand.

📖 Read the full blog post here: https://link.europa.eu/CvWPFW

*** UN Global Dialogue on AI Governance ***

EDPS @Secretary_General@social.edps.europa.eu Leonardo Cervera-Navas took part in the session "Safe, Secure and Trustworthy AI: Interoperability and Compatibility of Approaches" at the UN Global Dialogue on AI Governance in Geneva.

In his intervention, he underlined that building global interoperability in AI governance does not require starting from scratch. Instead, it is founded on linking existing policy instruments and collaborative frameworks, with the European Union serving as a primary regulatory anchor.

The Secretary General highlighted how fragmentation across governance authorities creates practical challenges throughout the technology lifecycle: administrative delays, inconsistent safety enforcement, and an erosion of public trust. When different authorities cannot agree on shared methods for establishing rules on AI, companies face conflicting compliance standards for a single system.

He stressed that AI governance is not about fearing technology, but about setting the conditions for trust. The EU's legal basis for the AI Act reflects this clearly: harmonising the internal market to protect health and safety (Art. 114 TFEU) and safeguarding privacy and personal data (Art. 16 TFEU).

"We do not ground planes because flying is risky: we regulate aviation to the highest safety standards, and that is precisely why people feel safe flying. The same logic must apply to Artificial Intelligence" Leonardo Cervera-Navas concluded.

#UN #AI #AIGovernance #EDPS

This spring recap brings together our latest EDPS Opinions and EDPB-EDPS Joint Opinions, with key recommendations on ongoing proposals.

Read more to learn about our most recent work:

🔹 EDPS Opinions

EDPS Opinion 7/2026 on the Proposal for a Regulation extending the application of Regulation (EU) 2021/1232, the interim rules regarding data processing for the purposes of combatting child sexual abuse material (CSAM) online: https://link.europa.eu/t6V3Gm

EDPS Opinion 8/2026 on the Proposal for a Digital Networks Act: https://link.europa.eu/3fxQX4

🔹 EDPB-EDPS Joint Opinions

Joint Opinion 2/2026 on the Digital Omnibus: https://link.europa.eu/kdK9hk

Joint Opinion 3/2026 on European Biotech Act: https://link.europa.eu/tknrDN

Joint Opinion 4/2026 on Cybersecurity Act 2 and NIS 2 Directive: https://link.europa.eu/mGBhtv

*** BLOGPOST - 58th EDPS-DPO Network Meeting ***

The 58th meeting of the EDPS-DPO network took place today in Brussels, bringing together DPOs from across the EU institutions at a time of significant regulatory and technological change.

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski opened the meeting by reaffirming the importance of DPO independence and looking ahead to upcoming legislative developments, welcoming simplification efforts while warning against reforms that could weaken fundamental rights.

Thomas Zerdick, Head of the Supervision and Enforcement Unit, presented a new follow-up tracker to ensure continuity between meetings, alongside updates on complaint-handling, international transfers and data protection impact assessments.

Luis Velasco, Head of the Technology and Privacy Unit, announced that updated guidance on AI risk management would be published this summer and drew attention to the growing threat of cyberattacks targeting EU institutions.

A hands-on workshop gave participants the opportunity to test a draft common DPIA template based on the EDPB model, while afternoon sessions addressed the lessons learned from the 2024 CEPOL data breach, recent case law developments and the latest results from the EDPS Website Compliance Awareness Campaign (WCAC).

"The Brussels meeting showed me once again the value of bringing the DPO community together in a dynamic network around concrete challenges and shared priorities. At a time when both the technological and regulatory environments are evolving quickly, practical and face-to-face exchanges of this kind remain essential to supporting compliance and strengthening data protection across the EU administration", said Leonardo Cervera-Navas, EDPS @Secretary_General@social.edps.europa.eu, in his concluding remarks.

Many thanks to the Executive Agencies of the European Commission for hosting such a productive meeting!

📃 Read Leonardo Cervera-Navas's blogpost https://link.europa.eu/Jvr7vJ

*** Privacy Symposium - Panel ***

@Supervisor@social.edps.europa.eu Wojciech Wiewiorowski at Privacy Symposium in Venice took part in panel "Handling Extraterritorial Effects of Data Regulations: Enforcement, Conflict of Laws, and Cooperation”, addressing some of the most pressing cross-border challenges authorities and organisations are facing today.

EU instruments such as standard contractual clauses already provide practical mechanisms: minimisation obligations, notification duties, clear competence rules, to manage tensions between jurisdictions without forcing a binary choice.

GDPR's one-stop-shop and binding dispute resolution offer a proven model within the EU/EEA. Beyond it, bilateral agreements and memoranda of understanding can pre-empt conflict by agreeing competence rules in advance.

Global cooperation is no longer optional. Forums such as the Global Privacy Assembly and instruments like Convention 108+ reduce fragmentation and build shared expectations.

"Global cooperation needs to grow stronger and should be a prime concern for us all. It is no longer an ancillary activity of an authority; it is and should be at the core of all its actions" Wojciech Wiewiórowski stressed.

🚨 Call for Blue Book Trainees – October 2026

If you have been selected for the Blue Book Traineeship starting in October 2026, you can now choose the EDPS teams that you would like to join.

At the EDPS, we welcome trainees from diverse backgrounds including law, policy, computer science, technology, communication and administration.

This is an opportunity to gain hands-on experience at the heart of European data protection and contribute to work shaping a digital future that respects fundamental rights and freedoms.

💼 You can join any of our teams:
- Supervision and Enforcement
- Policy and Legislative Consultation
- Technology and Privacy
- Artificial Intelligence
- Secretary General’s Office
- Information and Communication
- Governance and Internal Compliance

🔗 Learn more about our work and select your preferred team(s): https://link.europa.eu/NH7rhV

🎵 Jamback: Positive

#BlueBookTraineeship #teamEDPS

🚀 Ready to work at the forefront of Artificial Intelligence in the European Union? The Blue Book Traineeship is the perfect opportunity to join #teamEDPS and become part of our important work.

🤝 Meet Philipp, from Austria 🇦🇹 , who joined the EDPS AI Unit as a Blue Book Trainee in October:

“With a lifelong interest in innovative technologies 💻 and a background in Computer Science and Policy Making 👨‍💻 , I was keen to explore how digital innovation is shaped by public regulation. When I was selected for the Blue Book traineeship, the EDPS AI Unit felt like a unique opportunity to contribute to safeguarding the most influential digital technology of our time, while supporting the EU’s innovative capacity ⚙️ .

Working on the AI Act, one of the most actively debated and evolving regulatory frameworks, allowed me to closely follow how public and private actors cooperate in shaping ⚖️ legislative responses to emerging technologies. At the same time, the supportive team environment at the EDPS encouraged my professional development, while enabling me to expand my professional network with highly knowledgeable people from diverse fields.”

🖊️ Apply to the Blue Book Traineeship before 07 April 2026

👉 More info: https://link.europa.eu/NH7rhV

Join us in shaping a safer digital future!