Skip to content
EU Parl Watch

Adopted text, 21 October 2025

General Data Protection Regulation: additional procedural rules relating to the enforcement of the Regulation

Document TA-10-2025-0238 · P10_TA(2025)0238 · PE755.005

On Parliament’s site PDF Word

AI:In short

Parliament's amended version of the proposed regulation lays down additional procedural rules for enforcing the General Data Protection Regulation (GDPR). It sets out rules on cooperation between data protection authorities, including the submission of complaints and the handling of cross-border cases. It also addresses the rights of complainants and the procedures for the European Data Protection Board.

Key points

  1. The regulation establishes procedural rules for the enforcement of Regulation (EU) 2016/679, covering cooperation between supervisory authorities.
  2. It specifies requirements for lodging complaints with supervisory authorities and for the exchange of information between authorities.
  3. It defines time limits for actions by supervisory authorities in cross-border cases.
  4. It sets out the rights of complainants, including being informed of the progress and outcome of their complaint.
  5. It details the functioning of the European Data Protection Board in dispute resolution and consistency mechanisms.

Who is affected

  • Data protection supervisory authorities in EU member states, which must follow the new procedural rules.
  • Individuals and organisations that lodge complaints about data protection breaches.
  • The European Data Protection Board, which gains clarified procedures for handling cross-border disputes.

Legal basis. Article 16 and Article 294 of the Treaty on the Functioning of the European Union

Written by AI from the full text · every figure comes from the text · ¶ opens the paragraph · 4 Sept 2026 · Report a problem

Full text

Text 19 paragraphs

Committee on Civil Liberties, Justice and Home Affairs

European Parliament legislative resolution of 21 October 2025 on the proposal for a regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 (COM(2023)0348 – C9-0231/2023 – 2023/0202(COD))

(Ordinary legislative procedure: first reading)

The European Parliament,

–having regard to the Commission proposal to Parliament and the Council (COM(2023)0348),

–having regard to Article 294(2) and Article 16 of the Treaty on the Functioning of the European Union, pursuant to which the Commission submitted the proposal to Parliament (C90231/2023),

–having regard to Article 294(3) of the Treaty on the Functioning of the European Union,

–having regard to the reasoned opinion submitted, within the framework of Protocol No 2 on the application of the principles of subsidiarity and proportionality, by the Swedish Parliament, asserting that the draft legislative act does not comply with the principle of subsidiarity,

– having regard to the opinion of the European Economic and Social Committee of 13 December 2023,

– having regard to the provisional agreement approved by the committee responsible under Rule 75(4) of its Rules of Procedure and the undertaking given by the Council representative by letter of 27 June 2025 to approve Parliament’s position, in accordance with Article 294(4) of the Treaty on the Functioning of the European Union,

–having regard to Rule 60 of its Rules of Procedure,

–having regard to the opinion of the Committee on Legal Affairs,

Read the rest (7 paragraphs)

–having regard to the report of the Committee on Civil Liberties, Justice and Home Affairs (A9-0045/2024),

1.Adopts its position at first reading hereinafter set out;

2.Calls on the Commission to refer the matter to Parliament again if it replaces, substantially amends or intends to substantially amend its proposal;

3.Instructs its President to forward its position to the Council, the Commission and the national parliaments.

P10_TC1-COD(2023)0202

Position of the European Parliament adopted at first reading on 21 October 2025 with a view to the adoption of Regulation (EU) 2025/… of the European Parliament and of the Council laying down additional procedural rules on the enforcement of Regulation (EU) 2016/679

(As an agreement was reached between Parliament and Council, Parliament's position corresponds to the final legislative act, Regulation (EU) 2025/2518.)