GDPR Enforcement Updates

The European Data Protection Board (EDPB) is currently ramping up GDPR enforcement across the EU, with a strong focus on strengthening individuals' rights. A coordinated enforcement action is underway to ensure organizations are transparent about their data processing activities, investigating how they inform individuals about how their personal data is being used. This directly impacts citizens by increasing awareness and control over their data, and businesses must prepare for greater scrutiny of their transparency practices. Furthermore, new guidelines are anticipated to harmonize how national authorities enforce erasure requests.

These enforcement efforts particularly address the challenges surrounding the 'right to be forgotten'. The EDPB has found that technical complexities and inconsistent company responses currently hinder EU citizens' ability to have their personal data deleted effectively. These obstacles undermine the GDPR's effectiveness across the single market. This matters for both citizens who want to exercise their data rights and for businesses, who need clarity and consistency in how erasure requests are handled across different member states.

Looking ahead, the EDPB intends to address the identified shortcomings by issuing new guidelines to standardize procedures and promote more efficient compliance with erasure requests. These actions are a central part of the EDPB's 2026-2027 work program to strengthen digital privacy rights, indicating a continued commitment to robust GDPR enforcement and improved data protection for all EU residents. National data protection authorities also plan to coordinate more closely.