Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025, the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR.

The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data.

Next steps

During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR.

Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed.

During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels.

Background

The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.

In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector.

In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers.

In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access.

In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR).

Note to editors:
*The Board selected this topic during its October 2025 plenary.

For further information:

• AT DPA: Europäischer Datenschutzausschuss kündigt CEF-Maßnahme für 2026 an
• DA DPA:  EDPB iværksætter koordineret indsats om oplysningspligten 
• DE DPA (Brandenburg): Brandenburgische Datenschutzaufsicht beteiligt sich an europaweiter Prüfung zu Transparenzpflichten mit Schwerpunkt Personalvermittlungen
• DE DPA (Niedersachsen):Niedersachsen beteiligt sich an europaweiter Datenschutzprüfung zu Transparenz- und Informationspflichten
• FI DPA: Tietosuojavaltuutetun toimisto selvittää henkilötietojen käsittelyn läpinäkyvyyttä osana EU:n laajuista toimenpidettä
• FR DPA: Le CEPD lance une action coordonnée concernant les obligations de transparence et d'information
• EL DPA: Έναρξη συντονισμένης δράσης του ΕΣΠΔ 2026 σχετικά με τη διαφάνεια και την υποχρέωση ενημέρωσης των υποκειμένων
• ES DPA: La AEPD participa en una acción europea para analizar el cumplimiento de las obligaciones de transparencia e información por parte de las organizaciones
• IT DPA: Garanti europei, focus sugli obblighi di informazione e trasparenza 
• MT DPA: Launch of Coordinated Enforcement Framework 2026 – IDPC
• SL DPA: Ali obdelujete osebne podatke transparentno? Usklajena akcija EDPB v letu 2026
• SK DPA: CEF 2026: Spoločná dozorová akcia EDPB zameraná na transparentnosť informovania do ktorej sa Úrad na ochranu osobných údajov Slovenskej republiky zapojí v priebehu roka 2026
• PT DPA: CNPD participa na ação de supervisão coordenada europeia sobre as obrigações de transparência e informação