GDPR enforcement

DPAs are in charge of monitoring compliance with the GDPR: their enforcement actions aim to deter non-compliance and to protect individuals' data protection. They have a wide range of investigative powers (e.g. audits or inspections) and corrective powers (e.g. orders and administrative fines) and can act on their own initiative or responding to complaints.
For cases concerning processing of personal data taking place in multiple European countries, DPAs work together via the cooperation mechanism.
The EDPB brings together all DPAs and works towards smooth and effective GDPR enforcement through various initiatives.

Guidance

Template Complaint form and Template Acknowledgement of receipt

Other guidance
#GDPR enforcement #Cooperation between authorities
Read more about
Template Complaint form and Template Acknowledgement of receipt

Guidelines 04/2022 on the calculation of administrative fines under the GDPR

Guideline
#GDPR enforcement #Fines
Read more about
Guidelines 04/2022 on the calculation of administrative fines under the GDPR

Enforcement

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

EDPB Binding Decisions
#Legal basis #GDPR enforcement #Fines #Cooperation between authorities
Read more about
Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

EDPB Binding Decisions
#Basic principles #Children #Privacy by design and by default #GDPR enforcement #Cooperation between authorities
Read more about
Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

Policy work

EDPB Annual Report 2025

Reports, statements, and letters
#Anonymisation/pseudonymisation #GDPR enforcement #Cooperation between authorities #Cross-regulatory cooperation #International cooperation #Artificial intelligence #Technology
Read more about
EDPB Annual Report 2025

Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

Other policy document
#Cooperation between authorities #GDPR enforcement #Law enforcement
Read more about
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

Enforcement support

Report on the use of SPE external experts in 2025

Support Pool of Experts
#GDPR enforcement #Artificial intelligence #Cooperation between authorities
Read more about
Report on the use of SPE external experts in 2025

One-Stop-Shop case digest on the legal basis of "legitimate interest"

Support Pool of Experts
#Cooperation between authorities #GDPR enforcement
Read more about
One-Stop-Shop case digest on the legal basis of "legitimate interest"

Compliance instruments

Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR

Opinion of the Board (Art. 64)
#Controller/processor #GDPR enforcement #Cooperation between authorities
Read more about
Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR

Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment

Opinion of the Board (Art. 64)
#Controller/processor #GDPR enforcement #Cooperation between authorities
Read more about
Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment

Internal procedure

EDPB Document on Process guide for the selection and the handling of strategic cases

Internal document
#GDPR enforcement #Cooperation between authorities
Read more about
EDPB Document on Process guide for the selection and the handling of strategic cases

EDPB Document on selection of cases of strategic importance

Procedure
#GDPR enforcement #Cooperation between authorities
Read more about
EDPB Document on selection of cases of strategic importance