Cybersecurity Policy Report, Report Charts EU Privacy Regulator’s Work in 2025, (May 12, 2026)
Organizations Mentioned:Microsoft
By Tony Foley
The European Data Protection Supervisor (EDPS), the authority responsible for monitoring privacy compliance by EU institutions, bodies and agencies (EUIs), released its 2025 annual report last week, outlining the agency’s expansion into issues related to artificial intelligence (AI), its consultation activities, and its analysis of emerging technologies.
Specifically, the report highlights EDPS’s preparations for fulfilling its obligations as a notified body and market surveillance authority under the EU AI Act, reinforcing its newly created AI Unit and launching an AI regulatory sandbox. In addition, EDPS responded to a record 145 legislative consultations spanning topics from digital identity to targeted modifications to the European Union’s General Data Protection Regulation (GDPR), and conducted an investigation on the use of Microsoft 365 by EUIs (CPR, July 28, 2025).
EDPS also noted an increase in its scrutiny of international data transfers and large-scale IT systems in EUIs and outlined its analysis of the risks and opportunities of agentic AI, AI companions, federated learning, and other emerging trends. The agency also compared its progress on identified objectives against key performance indicators, finding that it met all nine indicators save one related to the number of followers on EDPS’s social media accounts, explaining that its platforms had reached a stage of maturity and audience saturation demonstrating that growth has stabilized.
News: InternationalLegislation DataPrivacy DataSecurity GDPR