GDPR Enforcement Updates

The European Union is actively strengthening GDPR enforcement, focusing on consistency and clarity. The European Data Protection Board (EDPB) recently issued a binding decision compelling the Belgian Data Protection Authority to investigate complaints against confusing cookie banners, signaling a push for stricter, uniform rules on cookie consent. Furthermore, the EDPB has clarified the 'right to object' and 'right to be forgotten' through an updated digest of national case law, providing clearer guidance for citizens and organisations alike. A new online tool also allows reporting of inconsistent GDPR rulings, aiming to identify systemic issues and promote a harmonised enforcement approach across the EU.

These measures significantly impact citizens and businesses by reinforcing fundamental data rights and fostering a more predictable legal environment. Citizens gain stronger protection against deceptive online practices, particularly concerning their consent for data tracking. For businesses, clearer guidance on data rights and consistent enforcement across member states reduces legal uncertainty and facilitates compliance within the EU single market. The EDPS Annual Report 2025 also highlights efforts to protect data amid emerging challenges like AI, demonstrating a forward-looking approach to digital privacy.

Looking ahead, the EU is committed to ensuring GDPR remains robust and adaptable in an evolving digital landscape, especially as the regulation marks its 10th anniversary. The ongoing work of the EDPB and EDPS will focus on identifying and addressing new digital privacy challenges, refining existing rules, and driving greater consistency in enforcement. This continuous evolution aims to solidify the EU's position as a global leader in data protection, ensuring individuals' rights are safeguarded while supporting a dynamic digital economy.