Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 JANUARY 2026

Looking Forward To GDPR Enforcement

Sheppard
Sheppard
Contributor
Sheppard

Sheppard

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more...

View firm profile
Explore more from Sheppard

New changes are on the horizon for GDPR enforcement across the European Union. At the very end of 2025, the EU adopted a regulation intended to address procedures around GDPR enforcement (Regulation (EU) 2025/2518).

European UnionPrivacy
Liisa Thomas
Liisa Thomas
Kathryn Smith
Kathryn Smith
Author LinkedIn connections

New changes are on the horizon for GDPR enforcement across the European Union. At the very end of 2025, the EU adopted a regulation intended to address procedures around GDPR enforcement (Regulation (EU) 2025/2518). The regulation sets out timelines for how data protection authorities (DPAs) handle complaints. It went into force this month, but will apply to GDPR enforcement actions opened after April 2, 2027.

So, what will change? The Procedural Regulation aims to make GDPR enforcement faster and more consistent. Here are the biggest changes:

  • Admissibility of Complaints: Complaints will need to include specific information to move forward. DPAs will then need to quickly assess each complaint and, if it involves more than one country, promptly send it to the lead DPA.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

OCC Issues Examiner Framework For Banks’ Use Of Artificial Intelligence

The Office of the Comptroller of the Currency has released a new framework for evaluating banks' deployment of artificial intelligence and agentic AI systems in their business operations. This guidance establishes how examiners will assess AI through existing risk management disciplines rather than creating separate regulatory requirements, with review intensity scaled to each use case's potential consequences and level of human oversight.
United StatesFinance and Banking
Sheppard
Sheppard
Article

FDA Balances Peptide Policy With Enforcement Against Unlawful Peptide Sellers

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...
United StatesFood, Drugs, Healthcare, Life Sciences
Sheppard
Sheppard
Article

Massachusetts Issues Guidance On Data Center Development Under Executive Order 658

Massachusetts Governor Maura Healey has issued Executive Order 658, establishing comprehensive permitting and regulatory standards for data centers exceeding 25 MW of peak electricity demand. The Order mandates community benefits agreements, clean energy procurement protocols, and coordination across multiple state agencies to ensure responsible development that protects ratepayers, communities, and the environment. This action positions Massachusetts alongside other states implementing stricter oversight o
United StatesEnergy and Natural Resources
Sheppard
Sheppard