Regulation (EU) 2025/2518 and what it means for reforming cross-border EU GDPR enforcement procedures
EU Law analysis: Regulation (EU) 2025/2518 (the Procedural Regulation) lays down EU-wide procedural rules for the enforcement of the EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) in cases involving cross-border processing of personal data. It aims to address inefficiencies and inconsistencies currently observed in cross-border enforcement under the EU GDPR. Key features include harmonised rules for admissibility of complaints and cooperation between Supervisory Authorities, streamlined ‘early resolution’ and ‘simplified cooperation’ procedures, and rights for parties under investigation to have their views heard. Paul Greaves is dual-qualified in England and Wales and Belgium, and is a counsel in Alston & Bird’s Privacy, Cyber & Data Strategy team.