The discussions covered, among other things, the Digital Omnibus, the protection of children, political advertising, transfers of personal data to third countries, and the need for data protection authorities to have sufficient funding and staffing. The EDPB stressed that simplification of rules must not weaken fundamental rights or the protection of personal data.

At the meeting, the EDPB also adopted a common template for data breach notifications. The aim is to harmonise and simplify the notification process under Article 33 GDPR, both for controllers and data protection authorities. The template is intended in particular to make it easier for smaller organisations to submit complete and timely notifications.

The template will be subject to public consultation until 5 August 2026. After that, the EDPB will decide how and when it will be implemented by data protection authorities across Europe.

The EDPB‘s press release