Council adopts new EU regulation to speed-up cross-border GDPR complaints
The Council of the EU has adopted new legislation to enhance and expedite the handling of cross-border data protection complaints under the General Data Protection Regulation (EU) 2016/679 (EU GDPR). The regulation harmonises rules on the admissibility of complaints, strengthens the procedural rights of complainants and organisations under investigation, and introduces a simplified cooperation mechanism for straightforward cases to reduce administrative burden. It also sets binding time limits, requiring most investigations to conclude within 15 months, extendable by 12 months for complex cases, and within 12 months for simplified procedures. Following the Council’s adoption, the measure completes the legislative process, entering into force 20 days after publication in the Official Journal of the EU and applying 15 months thereafter, thereby reinforcing consistent and efficient enforcement of data protection rules across the EU.