Dublin, 17 July– At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of information among regulators with different competences. The Board also discussed how to further expand efforts to support a consistent application of the General Data Protection Regulation (GDPR), including through more intense cooperation between Data Protection Authorities (DPAs).

A clear legal basis for efficient cross-regulatory cooperation

The Board underlines the growing need in the current regulatory environment for effective cooperation between regulators operating in adjacent areas of competence under EU law.

The EDPB calls upon the European Commission to propose a legal basis for cross-regulatory information sharing. This should enable regulators to exchange information, including confidential information, relevant to enforcement within their respective areas of competence.

First-hand experience of cooperating with other EU digital regulators at both national and EU level has highlighted the need for stronger legislation to facilitate more effective cross-regulatory cooperation, including enhanced information sharing. This will help remove barriers to cooperation and help improve enforcement outcomes and cross-regulatory coherence.

EDPB Chair, Anu Talus

Strengthening consistency and boosting efficient enforcement

The EDPB recalls the significant progress on cross-border enforcement, as also mentioned in the second European Commission report on the GDPR.

At the same time, DPAs are facing a considerable rise in the number and complexity of complaints, among others as a result of the increased use of AI. This is placing additional strain on already stretched resources limiting all DPAs’ ability to perform all their tasks and exercise their powers under the GDPR efficiently.

DPAs underlined the need to find practical and, where necessary, legislative solutions to address these challenges, to ensure the efficient enforcement of the GDPR, especially in cases where a large number of people is affected.

To further boost cross-border enforcement, the Board discussed practical solutions and how to pool resources to further deepen cooperation between DPAs, including the possibility for complaint-receiving authorities to make resources available to lead supervisory authorities, where useful. In addition, the DPAs will organise a series of workshops on enforcement procedures and to exchange information on national practices, also in the context of implementing the upcoming Procedural Regulation.

Greater use of joint operations will help DPAs pool resources and carry out their enforcement actions with greater efficiency. Through information sharing and joint operations, DPAs will support consistent and effective enforcement, better protect individuals and provide greater regulatory clarity and certainty for industry. In addition, in the context of the upcoming Procedural Regulation, which codifies many DPAs’ existing practices, exchanges of information on national practices will be crucial.

Des Hogan, Chairperson and Commissioner for Data Protection, Ireland

The Board noted that consistency depends on a broad range of actors and actions, going sometimes beyond the reach of the EDPB, for example when related to national legislation and case law. The EDPB members therefore committed to expanding its dialogue with other actors across the data protection ecosystem, in order to support greater consistency of the GDPR’s application.

Finally, the EDPB also took stock of the actions taken following the 2025 Helsinki Statement on enhanced clarity, support and engagement, from improved speed and quality of its guidance, the adoption of cross-regulatory guidance to making available templates and strengthening stakeholder engagement. The EDPB committed to continue to build on it.