The European Data Protection Board (EDPB) has decided on the topic for the next Europe-wide inspection campaign in 2026. The focus will be on transparency and information obligations under the GDPR.
What is it about?
National data protection supervisory authorities will examine how controllers implement their information obligations under Articles 12, 13 and 14 of the GDPR (transparent information). The decisive factor is how clearly, comprehensibly and completely data subjects are informed about data processing.
This not only applies to websites, but also to employees, customers, suppliers and applicants, who must be informed correctly and in a timely manner.
Experience from previous audits
Comprehensive audits by data protection supervisory authorities are relatively rare. The authorities usually select a representative cross-section of industries and company sizes. Experience shows that companies that know their processes and document them in a structured manner are well prepared.
Transparency is and remains a central element of data subjects’ rights and is an important indicator of the maturity of a professional data protection management system.
Further Information: Coordinated Enforcement Framework: EDPB selects topic for 2026: https://www.edpb.europa.eu/news/news/2025/coordinated-enforcement-framework-edpb-selects-topic-2026_en