EDPB calls for legal basis for cross-regulatory information sharing

Dublin, 17 July– At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of information among regulators with different competences. The Board also discussed how to further expand efforts to support a consistent application of the General Data Protection Regulation (GDPR), including through more intense cooperation between Data Protection Authorities (DPAs).

A clear legal basis for efficient cross-regulatory cooperation

The Board underlines the growing need in the current regulatory environment for effective cooperation between regulators operating in adjacent areas of competence under EU law.

The EDPB calls upon the European Commission to propose a legal basis for cross-regulatory information sharing. This should enable regulators to exchange information, including confidential information, relevant to enforcement within their respective areas of competence.

First-hand experience of cooperating with other EU digital regulators at both national and EU level has highlighted the need for stronger legislation to facilitate more effective cross-regulatory cooperation, including enhanced information sharing. This will help remove barriers to cooperation and help improve enforcement outcomes and cross-regulatory coherence.

EDPB Chair, Anu Talus

Strengthening consistency and boosting efficient enforcement

The EDPB recalls the significant progress on cross-border enforcement, as also mentioned in the second European Commission report on the GDPR.

At the same time, DPAs are facing a considerable rise in the number and complexity of complaints, among others as a result of the increased use of AI. This is placing additional strain on already stretched resources limiting all DPAs’ ability to perform all their tasks and exercise their powers under the GDPR efficiently.

DPAs underlined the need to find practical and, where necessary, legislative solutions to address these challenges, to ensure the efficient enforcement of the GDPR, especially in cases where a large number of people is affected.

To further boost cross-border enforcement, the Board discussed practical solutions and how to pool resources to further deepen cooperation between DPAs, including the possibility for complaint-receiving authorities to make resources available to lead supervisory authorities, where useful. In addition, the DPAs will organise a series of workshops on enforcement procedures and to exchange information on national practices, also in the context of implementing the upcoming Procedural Regulation.