On 15 April 2026, the EDPB adopted updates to the Europrivacy certification (the European Data Protection Seal). The European Data Protection Seal is a certification mechanism which allows organisations to demonstrate that their data processing activities comply with GDPR requirements.
What’s changed?
- The scope of the European Data Protection Seal has been extended to include controllers and processors established outside the EU who are subject to GDPR, i.e. who provide goods or services to individuals in Europe or monitor their behaviour.
- The EDPB also adopted Opinion 15/2026 confirming that “Europrivacy certification criteria intended to be used as tool for transfers” can be used as an appropriate transfer tool for international transfers under GDPR.
This really expands the potential for use of this seal!
When does it come into force/apply in practice?
Although the updates were adopted on 15 April 2026 and the new version can be used now, there’s a transition period for existing applications/certificates. Certifications under the older v60 criteria should be finalised by 31 December 2026. After that, new certifications should not use v60, which will be fully phased out by 31 December 2029.
You can find out more about the European Data Protection Seal here.
