Skip to content
Guidance · EDPB EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

The Helsinki Statement on enhanced clarity, support and engagement

Op 2 juli 2025 heeft de EDPB tijdens een tweedaagse bijeenkomst in Helsinki nieuwe initiatieven goedgekeurd om de naleving van de GDPR te vergemakkelijken, de dialoog met belanghebbenden te versterken en samenwerking tussen verschillende regelgevende instanties te bevorderen. Deze initiatieven ri...

Statement

Full text 4 sections

Paragraphs carrying a topic or an applied provision show those connections inline
§

1 The Helsinki Statement on enhanced clarity, support and engagement A fundamental rights approach to innovation and competitiveness Adopted on 2 July 2025 The European Data Protection Board has adopted the following statement: At a two - day high - level meeting in Helsinki (1 – 2 July 2025), the EDPB members agreed on new initiatives to facilitate easier GDPR compliance, to enhance the dialogue with a broad range of stakeholders, to strengthen consistency and to develop cross - regulat ory cooperation in the new digital regulatory landscape. These initiatives enable, in particular, micro, small and medium organisations; empower responsible innovation; and reinforce competitiveness in Europe. The EDPB members underlined the essential role of data protection in upholding European values and individuals’ fundamental rights, and supporting the human - centric use of personal data. Across its efforts, the EDPB will strengthen its dialogue with stakeholders , holding proactive and early engagement to identify specific areas where further support and clarification is required, and providing the opportunity for stakeholders to flag possible inconsistencies and give feedback.

§

The EDPB will publicly report on the main outcomes of public consultations. The EDPB notes the importance of also providing timely and concise guidance that is accessible, easy to understand, and practical for micro, small and medium organisations in line with the risk - based approach. With this in mind, the EDPB agreed to update its working methods and to develop complementary formats for guidance. 2 Adopted on 2 July 2025 New tools to help make GDPR application easier will include: • a series of ready - to - use templates for organisations , building on and harmonising the work already done at national level; • a common template for data breach notifications for Data Protection Authorities (DPAs) , in view of streamlining data breach notifications and easing the burden of organisations, in support of a possible cross - regulatory European notification solution; • direct and easily - applicable resources , including checklists, how - tos and FAQs, to help organisations understand their key obligations.

§

The EDPB will enhance consistency of the application and enforcement of the GDPR by DPAs, including: • the collection of positions by DPAs on priority issues taken in national guidance and decisions, as well as court judgments, to produce ‘case law’ - style publications which help organisations understand concrete positions taken by DPAs; • regular follow - ups on guidelines to ensure their effectiveness and consistent application including, where appropriate, through reviews of guidelines and targeted coordinated enforcement actions and strategies; • continued efforts to align national and EDPB guidance where inconsistencies are identified; • greater harmonisation of enforcement by developing common practices, methodologies, tools and common actions , even when the one - stop - shop mechanism is not applicable; • when strategic cross - border topics arise, DPAs will prioritise the preparation of EU positions to ensure consistency by design.

§

The EDPB will further proactively engage with other regulators to support the new cross - regulatory landscape, embedding this within its priorities and procedures, while maintaining coherent and consistent safeguards for the protection of personal data. This engagement will include: • the preparation of further joint guidelines together with other regulators, as appropriate, to ensure consistency in the application of different legal frameworks; • fostering structured cooperation with other regulators to share experiences and to address legal and practical challenges to cross - regulatory cooperation on concrete cases; • the proactive invitation of other regulators to relevant EDPB meetings. Finally, the EDPB recalls the significant progress achieved in enforcement cooperation over the past three years, since the adoption of the Vienna Statement on Enforcement Cooperation on 28 April 2022 , as well as the growing synergies among DPAs. With this solid foundation, the EDPB is well - positioned to effectiv ely address emerging challenges.

How it connects

4 of 4 paragraphs apply legislation or carry a topic — see them in the full text ↓
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle
C‑313/23, C‑316/23 and C‑332/23 Inspektorat kam Visshia sadeben savet C‑313/23, C‑316/23 and C‑332/23 - Inspektorat kam Visshia sadeben savet Following the expiration of the prescribed time limit for submission of annual declarations of assets of judges, public prosecutors and investigating magistrates and their… CJEU Apr 30, 2025 Supervision Monitoring Data Breaches
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
C-507/23 A v Patērētāju tiesību aizsardzības centrs The Court of Justice of the European Union issued a preliminary ruling on a reference from the Latvian Supreme Court in Case C-507/23, involving an individual ("A") and the… CJEU ·Eighth Chamber Oct 4, 2024 Liability Personal Data Data Breaches