EDPB CEF 2024 & 2025: Data Subject Rights (& Wrongs)

The European Data Protection Board ("EDPB") has launched its Coordinated Enforcement Framework ("CEF") action for 2025, which will centre on the right to erasure under Article 17 of the General Data Protection Regulation ("GDPR"). This marks a thematic continuation of the EDPB's focus on the implementation of data subject rights, following last year's CEF action on the right of access.

The EDPB is composed of representatives from the various EU Data Protection Authorities ("DPAs") and its goal is to ensure a consistent application and enforcement of the GDPR across EU Member States. The CEF is an action of the EDPB under its 2024-2027 strategy, which seeks to streamline enforcement and cooperation among DPAs. The reports that the EDPB produces with its findings from a CEF action usually contain key learnings which ought to be implemented by controllers seeking to ensure compliance with the GDPR.