Accessibility Tools

Supervision and enforcement

One of the EDPS' main tasks is to supervise personal data processing by the  European institutions and bodies . This supervision work takes various forms.

The bulk of it is based on notifications of processing operations presenting specific risks. These need to be prior checked by the EDPS. Based on the facts submitted to him, the EDPS will examine the processing of personal data in relation to the Data Protection Regulation ( Regulation (EC) No 45/2001 ). In most cases, this exercise leads to a set of recommendations that the institution or body need to implement so as to ensure compliance with data protection rules.

The EDPS receives complaints from EU staff members as well as from other people who feel that their personal data have been mishandled by a European institution or body. If a complaint is admissible, the EDPS usually carries out an inquiry. The findings are communicated to the complainant, and necessary measures are adopted.

The EDPS may adopt opinions on administrative measures related to data protection adopted by European institutions and bodies.

The EDPS may carry out inquiries on his own initiative. Inquiries and inspections are essential for a supervisory authority to have the means for fact-finding, following up of cases and monitoring of compliance in general. 

In order to monitor compliance with Regulation (EC) No 45/2001, the EDPS largely relies on the Data Protection Officers (DPOs) who are to be appointed in each institution/body. Apart from bilateral meetings and contacts with the DPOs, the EDPS also takes part in the regular meetings of the DPO network.

Since January 2004, the EDPS has ensured the supervision of the central unit of Eurodac. An essential aspect of this supervision is the cooperation with national supervisory authorities and the drawing up recommendations for common solutions to existing problems.

The EDPS publishes thematic guidelines on critical issues to serve as reference documents for the European administration.

In December 2010 the EDPS adopted a policy paper entitled: "Monitoring and Ensuring Compliance with Regulation (EC) 45/2001".

  • 19 November 2015
    Finishing line in sight for the GDPR: the devil is in the details, W. Wiewiórowski, Assistant EDPS, in the panel debate with Jan Philipp Albrecht, MEP. Watch the video.
  • 19 November 2015

    EDPS encourages a new debate on Big Data. Read our Opinion and the press release.

  • 17 November 2015
    We are in mourning for the victims and families of the horrific terrorist attacks in Paris. These attacks are against us all and we stand united.
  • 13 November 2015

    Finishing line in sight for the GDPR: the devil is in the details
    – W. Wiewiórowski in the live panel debate at 11:00 CET on 13 November 2015. Watch the web streaming.
  • 28 October 2015

    A further step towards comprehensive EU data protection: EDPS recommendations for the police and justice sectors. See our press release and our Opinion.

  • 26 November 2015
    The Industrial Internet Era, Brussels, Belgium, Wojciech Wiewiórowski takes part in panel Cybersecurity, Privacy and the Industrial IoT
  • 17 November 2015
  • 10 November 2015

    Information Security Solutions Europe Conference, Berlin, Germany, ...

  • 05 November 2015

    DPO meeting
    hosted by ENISA, Athens, Greece, Giovanni Buttarelli and Wojciech Wiewiórowski participate in ...
  • 26 October 2015

    37th International Privacy Conference, Amsterdam, The Netherlands, Giovanni Buttarelli and Wojciech Wiewiórowski attend ...

  • 16 October 2015

    The Borderline Between Cybersecurity and Individual Freedoms, 7th Semi-Annual ENAM Conference, Vilnius, Lithuania, keynote speech by Giovanni Buttarelli