EDPB adopts recommendations on mandatory user account creation for e-commerce sites
The European Data Protection Board (EDPB) has adopted recommendations clarifying the legal basis for requiring user account creation on e-commerce websites. The recommendations establish that users should generally have the option to engage with e-commerce websites, including making purchases, without creating an account through either a "guest mode" or voluntary account creation option. Mandatory account creation can only be justified in limited cases, such as offering subscription services or providing access to exclusive offers. The recommendations are subject to public consultation to allow stakeholder feedback. The EDPB also conducted preliminary discussions on the Digital Omnibus proposal, on which it will issue a joint opinion with the European Data Protection Supervisor (EDPS), and appointed Jelena Virant Burnik, Information Commissioner of Slovenia, as new Deputy Chair of the Board during its 4 December 2025 plenary meeting.