Cybersecurity Policy Report, Statement on Facilitating GDPR Compliance Adopted by EDPB, (Jul 7, 2025)
By Tony Foley
The European Data Protection Board (EDPB) has adopted a statement on new initiatives to facilitate compliance with the European Union’s General Data Protection Regulation (GDPR), in particular for micro, small and medium organizations, and strengthen consistency and cross-regulatory cooperation
“The EDPB aims to ensure that compliance with the GDPR can be more easily achieved,” EDPB Chair Ana Talus said in a news release. “By placing fundamental rights into the core of their digital transformation, organisations can ensure that technological advancements and the respect for European values go hand in hand, ultimately building a stronger and more resilient digital economy.”
The so-called Helsinki Statement, which may be accessed from the news release, asserts that the EDPB will strengthen its dialogue with stakeholders, fostering proactive and early engagement to identify areas where further support and clarification is required and providing the opportunity for stakeholders to flag possible inconsistencies and give feedback.
Among the tools outlined in the statement that will be designed to help make GDPR application easier are the following:
A series of ready-to-use templates for organizations building on and harmonizing work already done at the national level;
A common template for data breach notifications for data protection authorities (DPAs); and
Direct and easily accessible resources, including checklists, examples, and frequently asked questions, to help organizations understand their key obligations.
The statement further specifies the steps the EDPB will take to enhance the consistency of the application and enforcement of the GDPR by DPAs, including collecting views of DPAs on priority issues, regular follow-ups on guidelines through regular review and coordinated enforcement actions, continued efforts to align national and EDPB guidance, greater harmonization of enforcement through common practices, methodologies, and tools, and prioritizing the preparation of EU positions regarding strategic cross-border topics.
The EDPB said it would proactively engage with other regulators to support the new cross-regulatory landscape, including the preparation of further joint guidelines, and would encourage structured cooperation with other regulators, including inviting other regulators to relevant EDPB meetings.
News: InternationalLegislation DataPrivacy GDPR