March 2026 – In an increasingly digital and complex data environment, the GDPR continues to play a central role for organisations, even eight years after taking effect. Transparency is once again in the spotlight, with data protection authorities and EU regulatory bodies reinforcing that compliance goes beyond simply informing data subjects, and that organisations are expected to ensure transparency by design and by default.
1. Coordinated enforcement framework
On 19 March, the European Data Protection Board (EDPB) launched its Coordinated Enforcement Framework action for 2026. Following the 2025 coordinated action on the right to erasure, this year’s initiative focuses on compliance with transparency and information obligations under the GDPR. With 25 data protection authorities (DPAs) across Europe taking part, the initiative further confirms renewed emphasis on this area.
