Dutch DPA must publish GDPR sanctions from September 1, 2026
On August 27, 2026, the Dutch data protection authority said GDPR fines and related sanctions become legally required to publish from September 1 under UAVG amendments.
EDPB finalizes GDPR guidelines for blockchain processing
On July 8, 2026, the European Data Protection Board adopted the final version of its guidelines on processing personal data through blockchain technologies after public consultation.
EDPB asks Commission to review EU-US Data Privacy Framework
The European Data Protection Board asked the European Commission to assess whether Trump v. Slaughter undermines FTC independence assumptions in the EU-US Data Privacy Framework adequacy decision.
GDPR Procedural Regulation published; new cross-border enforcement rules apply from April 2027
Regulation (EU) 2025/2518 was published in the Official Journal on December 12, 2025. It enters into force January 1, 2026 and, from April 2, 2027, harmonizes how supervisory authorities handle cross-border GDPR complaints and investigations, with deadlines and rights for the organizations under investigation.