EDPB publishes work programme outlining guidance priorities for 2026-27
The European Data Protection Board (EDPB) has published its Work Programme 2026–27, setting out its priorities under the four pillars of its 2024–27 Strategy and reflecting commitments in the Helsinki Statement to enhance clarity, support and engagement, with a focus on making Regulation (EU) 2016/679, EU General Data Protection Regulation compliance easier. The EDPB will simplify compliance by issuing practical guidance on key issues such as anonymisation, pseudonymisation, legitimate interests, children’s data and scientific research, updating existing guidelines, and developing ready-to-use EU templates for data breach notifications, data protection impact assessments, legitimate interest assessments, records of processing activities and privacy notices, alongside tools tailored to small and medium-sized enterprises. It will reinforce consistent enforcement by updating cooperation and complaint-handling procedures, implementing a coordinated enforcement action in 2026 on transparency obligations, strengthening the consistency mechanism, and improving cooperation tools and IT systems. The programme also addresses the interaction between data protection law and other EU frameworks, including the EU AI Act, the EU Digital Markets Act and the EU Digital Services Act, and foresees guidance on emerging technologies such as generative artificial intelligence and blockchain.