Brussels 25 July 2024
Today, the Commission published its 2nd report on the application of the General Data Protection Regulation (GDPR). The report finds that the Regulation continues to deliver effectively for individuals and businesses, ensuring strong protection for data subjects and risk-based obligations for controllers and processors. It also outlines some priority areas to improve the application of the GDPR, such as a swift adoption of the Commission’s proposal for a GDPR Procedural Regulation to ensure robust enforcement with quick remedies. It also calls for proactive support from data protection authorities, especially to SMEs and small operators; a consistent interpretation and enforcement of the GDPR across the EU, and an effective cooperation between regulators at national, EU and international levels to guarantee a coherent application of the growing body of EU digital rules.
Věra Jourová, Vice-President for Values and Transparency, said:
“The GDPR is the crown-jewel of EU digital policy and it became a foundation for data protection worldwide. It is the solid basis on which lies the set of initiatives that allow individuals to harness the benefits of the digital transition while fully respecting fundamental rights. We must continue working to guarantee the coherent application of the EU’s digital rulebook.”
Didier Reynders, Commissioner for Justice, added:
“The GDPR has delivered strong protection for individuals and allowed businesses to reap the benefits of a level playing field and the free flow of data. The EU has also stepped out its cooperation with foreign partners to facilitate safe data flows and develop strong international standards. But more can be done to support the compliance efforts of businesses, especially SMEs. This is why our report provides for a concrete list of action points for the coming years, including practical guidance and tailor-made tools to help all concerned actors meeting their obligations.”
The report takes into account contributions from the Council, the European Data Protection Board, national data protection authorities, stakeholders, and a report of the Fundamental Rights Agency. More information about data protection can be found online.
GDPR in practice – Experiences of data protection authorities
Source – EU Commission and EU Fundamental Rights Agency