The EDPB selected this topic, as it is one of the most frequently exercised GDPR rights and has given rise to many complaints to Data Protection Authorities (“DPAs”) across the EEA, and a growing number of decisions from DPAs. For 2026, the CEF intends to focus on companies’ compliance with the transparency and information obligations in Articles 12-14 GDPR.
The Report notes that 32 DPAs across Europe took part in the CEF concerning compliance with the right to erasure. Following the CEF nine DPAs commenced new formal investigations or continued ongoing investigations, whilst 23 DPAs carried out fact-finding exercises. A total of 764 controllers across Europe responded to the CEF action, ranging from small and medium-sized enterprises (“SMEs”) to big companies active in many different industries and
