Introduction
The European Data Protection Supervisor (EDPS) and the European Data Protection Board (EDPB) have taken significant steps to enhance the governance, risk management [2] [3], and supervision of Artificial Intelligence (AI) systems within the European Union. These efforts aim to ensure compliance with EU data protection standards and address emerging challenges related to AI technologies and data privacy.
Description
The European Data Protection Supervisor (EDPS) has established an Artificial Intelligence Unit and introduced a dedicated AI Strategy focused on Governance [2], Risk Management [2] [3], and Supervision [2] [3]. This proactive initiative positions the EDPS as the market surveillance authority responsible for overseeing AI systems and assessing the conformity of high-risk AI technologies [2], ensuring that EU institutions develop and utilize AI tools in compliance with EU data protection standards [3]. In 2024 [1] [2] [3] [4] [5] [6], the EDPS emphasized the importance of understanding both the benefits and limitations of AI technologies in relation to data protection and individual privacy [2]. A record 97 legislative consultations were published [2] [3], addressing the data protection aspects of various upcoming EU regulations that significantly impact citizens’ privacy rights [2] [3].
In alignment with these efforts, the European Data Protection Board (EDPB) has adopted its strategy for 2024-2027 [4], which aims to strengthen and modernize data protection across Europe while ensuring consistent enforcement of the General Data Protection Regulation (GDPR) [1]. Key priorities include addressing emerging challenges [4], enhancing cross-border legislative cooperation [4] [6], and providing guidance on the use of personal data for training AI models, as well as consent models used by major online platforms and facial recognition technologies [4] [6]. In 2024 [1] [2] [3] [4] [5] [6], the EDPB issued eight opinions under Article 64(2) of the GDPR [1] [4], specifically addressing critical issues such as the implications of ‘Consent or Pay’ models employed by large online platforms [5], facial recognition technology at airports [6], and the use of personal data for training AI models [1] [4] [5] [6]. These opinions aim to ensure uniformity in the application of data protection laws and reflect the EDPB’s active role in legislative discussions [6], particularly regarding the AI Act framework and GDPR enforcement procedures [5].
The EDPB has expanded its guidance to assist organizations in achieving and maintaining compliance with the GDPR [1], introducing new guidelines on legitimate interest and data transfers to third country authorities [4] [5]. Engagement with stakeholders has been a priority [5], with public consultations and events focused on AI models and consent-related issues [4] [5]. The EDPB has also contributed to the development of new digital legislations [5], including the Digital Markets Act [5] [6], Digital Services Act [5] [6], AI Act [1] [4] [5] [6], Data Governance Act [5] [6], and Data Act [5] [6], ensuring alignment with GDPR principles and fostering cooperation with European and international partners [5].
The EDPS has intensified its supervisory and enforcement actions [2] [3], equipping EU institutions with tools such as Supervisory Opinions and training sessions to ensure adherence to EU data protection laws [2] [3]. Collaboration with the EDPB and international organizations has been prioritized to promote a unified application of EU data protection rules and elevate them to global standards [3]. The EDPS operates under Regulation EU 2018/1725 [3], which outlines its responsibilities in monitoring personal data processing by EU institutions and advising on privacy-related policies and legislation [3], while also preparing for the implications of emerging technologies like AI on data protection.
Conclusion
The initiatives undertaken by the EDPS and EDPB underscore a robust commitment to safeguarding data privacy in the face of rapidly evolving AI technologies. By establishing comprehensive strategies and guidelines, these bodies aim to ensure that AI systems are developed and deployed in a manner that respects individual privacy rights and complies with EU data protection laws. The collaborative efforts with international partners further highlight the global impact and influence of EU data protection standards.
References
[1] https://www.edpb.europa.eu/news/news/2025/edpb-annual-report-2024-protecting-personal-data-changing-landscapeel
[2] https://www.eunews.it/en/2025/04/23/european-data-protection-supervisor-use-human-intelligence-to-tackle-the-digital-landscapes-possibilities-and-risks/
[3] https://www.edps.europa.eu/press-publications/press-news/press-releases/2025/annual-report-2024-acting-future-data-protectionde
[4] https://www.edpb.europa.eu/news/news/2025/edpb-annual-report-2024-protecting-personal-data-changing-landscapeen
[5] https://www.efdpo.eu/edpb-annual-report-2024-protecting-personal-data-in-a-changing-landscape/
[6] https://www.edpb.europa.eu/news/news/2025/edpb-annual-report-2024-protecting-personal-data-changing-landscapesv
