Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 DECEMBER 2025

Market Intelligence Thought Leadership Award Winner

Interplay Between The Digital Service Act (DSA) And General Data Protection Regulation (GDPR): Draft EDPB Guidelines 3/2025

GVZH Advocates
GVZH Advocates
Contributor
GVZH Advocates

GVZH Advocates

GVZH Advocates is a modern and sophisticated legal practice comprised of top-tier professionals,...

View firm profile
Explore more from GVZH Advocates

The European Data Protection Board (EDPB) published the first draft guidelines on the interplay between the Digital Services Act (the "DSA") and the General Data Protection Regulation...

European UnionPrivacy
Andrew Zammit
Andrew Zammit
Erika Criscione
Erika Criscione
Author LinkedIn connections

The European Data Protection Board (EDPB) published the first draft guidelines on the interplay between the Digital Services Act1 (the "DSA") and the General Data Protection Regulation2 (the "GDPR"), entitled "Guidelines 3/2025 on the interplay between the DSA and the GDPR".

The proposed guidelines were published on the 11th of September 2025 for public consultation, which was closed on the 31 October 2025.

The publication of the Guidelines 3/2025 is a crucial step in clarifying how online service providers should apply the GDPR in the context of their obligations under the DSA.

The following sections outline some key aspects of the EDPB draft guidelines, with a focus on the good practices that organisations may implement in order to ensure compliance with both the DSA and the GDPR.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The Enforcement Shift: Why Cyber-Negligence In Malta Now Carries Direct Liability

Recent legislative changes in Malta have fundamentally transformed cybersecurity from a technical IT concern into a critical matter of corporate governance and legal liability. With the introduction of Legal Notice 89 of 2026 and the rise of AI-enabled cyber threats, organizations now face direct enforcement mechanisms and heightened expectations for cyber-risk management that can expose both companies and their directors to significant consequences.
MaltaTechnology
GVZH Advocates
GVZH Advocates
Article

When AI Meets Children: Italy’s Garante Fines Character.AI Over Transparency And Safeguarding Failures

The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.
European UnionPrivacy
GVZH Advocates
GVZH Advocates
Article

The Concept Of “Single Source” In The Equal Pay (Transparency And Reporting) Regulations

Malta's new Equal Pay Regulations introduce a restrictive 'single source' test for cross-employer pay comparisons that may conflict with EU law. This analysis examines whether Regulation 8's requirement that undertakings be under common control and carry out the same economic activity is compatible with the broader CJEU interpretation established in Lawrence and codified in Directive 2023/970.
European UnionEmployment and HR
GVZH Advocates
GVZH Advocates
Article

Managing Hybrid & Remote Work: Legal Pitfalls For Employers In Malta

Remote and hybrid work arrangements in Malta carry significant legal implications that extend far beyond operational convenience. Employers must navigate a complex web of employment protections, working-time regulations, data protection requirements, anti-discrimination duties, and cross-border tax considerations. Without proper contractual frameworks and compliance procedures, organizations risk employment claims, discrimination awards, regulatory enforcement action, and unexpected permanent establishment
MaltaEmployment and HR
GVZH Advocates
GVZH Advocates