EDPB (European Data Protection Board) · September 21, 2026

EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines

EDPB adopts guidelines on administrative fines under GDPR and on interplay between Digital Service Act and GDPR.

High obligation Framework Health Data, Privacy & Security General Regulatory EU-wide GDPRHealth data

<p>Brussels, 21 September – During its latest plenary, the EDPB has adopted <a href="https://www.edpb.europa.eu/documents/guideline/guidelines-042026-on-the-application-of-the-power-to-impose-administrative_en">guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR</a> and <a href="https://www.edpb.europa.eu/documents/guideline/guidelines-32025-on-the-interplay-between-the-dsa-and-the-gdpr_en">the final version of its guidelines on interplay between the Digital Service Act (DSA) and the GDPR</a>.</p><blockquote><p>The new EDPB guidelines are a major step in further aligning how Data Protection Authorities decide whether an administrative fine should be imposed, either

Dates and deadlines

Regulatory Deadline

November 13, 2026

Read the official source ↗

Published by EDPB (European Data Protection Board). HealthSignal links to the original document; the summary above is extracted from the source text.