On 12 December 2025, the EU Commission published the GDPR Enforcement Rules Regulation.
The regulation “aims to deliver faster and more effective enforcement of the GDPR in large, cross-border cases.” The regulation does not alter key aspects of the GDPR but instead looks at the procedure for dealing with cross-border complaints by:
- harmonising admissibility criteria for cross border complaints
- setting out rules for the involvement of the complainant in the procedure
- setting out a simple co-operation procedure for less complex cases
- applying deadlines for investigations
The regulation will apply from 2 April 2027 and can be found here.