Adopted text
General Data Protection Regulation: additional procedural rules relating to the enforcement of the Regulation
TA-10-2025-0238 · P10_TA(2025)0238 · PE755.005
- Adopted in plenary on · Adopted 533–43–68 · See the decision →
- Full procedure 2023/0202
✦ In short · AI summary of this text, generated 4 Sept 2026
Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.
Parliament's amended version of the proposed regulation lays down additional procedural rules for enforcing the General Data Protection Regulation (GDPR).¶ It sets out rules on cooperation between data protection authorities, including the submission of complaints and the handling of cross-border cases. It also addresses the rights of complainants and the procedures for the European Data Protection Board.
Key points
- The regulation establishes procedural rules for the enforcement of Regulation (EU) 2016/679, covering cooperation between supervisory authorities.¶
- It specifies requirements for lodging complaints with supervisory authorities and for the exchange of information between authorities.
- It defines time limits for actions by supervisory authorities in cross-border cases.
- It sets out the rights of complainants, including being informed of the progress and outcome of their complaint.
- It details the functioning of the European Data Protection Board in dispute resolution and consistency mechanisms.
Who is affected
- Data protection supervisory authorities in EU member states, which must follow the new procedural rules.¶
- Individuals and organisations that lodge complaints about data protection breaches.
- The European Data Protection Board, which gains clarified procedures for handling cross-border disputes.
Legal basis: Article 16 and Article 294 of the Treaty on the Functioning of the European Union¶¶