Home - IDPC

AI Regulations come into force – IDPC designated as a Market Surveillance Authority for certain High-Risk AI Systems Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Guidelines and FAQ on Data Protection Officers Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Data Protection for Individuals - Your Rights Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Guidelines on CCTV and Data Protection Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Exercise your rights for SIS II Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Visa Information System (VIS) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Entry / Exit System (EES) Read More

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Online Self-Assessment Compliance Tool

Find out how to use our online self-assessment compliance tool to indicate risks of non-compliance with the GDPR.

Information and Data Protection Appeals Tribunal

Click here for more information about your right to file an appeal from a decision of the Commissioner and the guidelines to file such an appeal.

Decisions

This section lists information about the legally binding decisions taken by the Commissioner.

Latest News & Publications

2025 Global Privacy Enforcement Network sweep focuses on the protection of children’s privacy

2025 Global Privacy Enforcement Network sweep focuses on the protection of children’s privacy 03 November 2025 From the 3 to the 7 November 2025, the IDPC will participate to the annual Global Privacy Enforcement Network (GPEN) Sweep that will see more than thirty authorities for the protection of personal data and privacy from around […]

03
Nov

EDPS unveils revised Guidance on Generative AI, strengthening data protection in a rapidly changing digital era

EDPS unveils revised Guidance on Generative AI, strengthening data protection in a rapidly changing digital era 30 October 2025 The European Data Protection Supervisor (EDPS) published its revised and updated guidelines on the use of generative Artificial Intelligence (AI) and processing of personal data by EU institutions, bodies, offices, and agencies (EUIs), reflecting the fast-moving […]

30
Oct

IDPC organises FRIA Workshop

IDPC organises FRIA Workshop 24 October 2025 The Office of the Information and Data Protection Commissioner (IDPC) successfully organised a full-day workshop focused on the requirement to conduct a Fundamental Rights Impact Assessment (FRIA) under Article 27 of the AI Act. The workshop was held in close collaboration with Professor Alessandro Mantelero, an acclaimed […]

24
Oct

Strengthening Schengen security and preventing irregular migration: EU Entry Exit System enters into operation

Strengthening Schengen security and preventing irregular migration: EU Entry Exit System enters into operation 22 October 2025 On the occasion of the upcoming entry into operation of the EU Entry Exit System (EES) on 12 October 2025, the Coordinated Supervision Committee (CSC) will include the EES system under its scope. This system registers non-Schengen […]

22
Oct

Coordinated Enforcement Framework: EDPB selects topic for 2026

Coordinated Enforcement Framework: EDPB selects topic for 2026 21 October 2025 During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth coordinated enforcement action, which will concern compliance with the obligations of transparency and information under the General Data Protection Regulation (GDPR). The GDPR ensures that individuals are informed […]

21
Oct

Draft UK adequacy decisions: EDPB adopts opinions

Draft UK adequacy decisions: EDPB adopts opinions 20 October 2025 During its latest plenary, the EDPB adopted two opinions on the European Commission’s draft decisions on the extension of the validity of the UK adequacy decisions under the General Data Protection Regulation (GDPR) and the Law Enforcement Directive (LED) until December 2031. The EDPB opinions, requested by […]

20
Oct

IDPC launches new Podcast series

IDPC launches new Podcast series 16 October 2025 Today we launch our brand-new podcast series! Episode #1 of the IDPC Podcast features the Information and Data Protection Commissioner Ian Deguara and provides an overview of the work of the IDPC. The podcast focuses on the protection of personal data - a fundamental right enshrined […]

16
Oct

AI Regulations come into force – IDPC designated as a Market Surveillance Authority for certain High-Risk AI Systems under Annex III of the AI Act

AI Regulations come into force - IDPC designated as a Market Surveillance Authority for certain High-Risk AI Systems under Annex III of the AI Act 13 October 2025 On 10 October 2025, the Government published Legal Notice 227 of 2025, entitled the Artificial Intelligence (Designation of the Information and Data Protection Commissioner for the purposes […]

13
Oct

DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints

DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints 09 October 2025 During its latest Plenary, the EDPB and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR). These are the first joint guidelines by the Board […]

09
Oct

CJEU Advocate General: the publication of the name of any professional athlete who has infringed the anti-doping rules is contrary to EU law

CJEU Advocate General: the publication of the name of any professional athlete who has infringed the anti-doping rules is contrary to EU law 25 September 2025 Four professional athletes who infringed the anti-doping rules challenge, before an Austrian court, the fact that their names, the sporting discipline concerned, the duration of their exclusion from […]

25
Sep

IDPC Joins Panel on AI and Data Regulations for Businesses

IDPC Joins Panel on AI and Data Regulations for Businesses 23 September 2025 Dr Marco Fagnano, Legal Counsel at the Office of the Information and Data Protection Commissioner (IDPC), participated in a high-level panel discussion titled "Decoding AI and Data Regulations for Businesses", held at the Malta Digital Innovation Authority (MDIA) on the 5 […]

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Notify a Personal Data Breach

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

File a Data Protection Complaint

As a data subject you have the right to lodge a complaint with this Office in those cases where you believe that your data protection rights have been infringed following the processing of your personal data by a data controller.

Submit a FOI complaint

Submit a Freedom of Information complaint.

Online Self-Assessment Compliance Tool

Read More b

Information and Data Protection Appeals Tribunal

Read More b

Decisions

Read More b

Latest News & Publications

2025 Global Privacy Enforcement Network sweep focuses on the protection of children’s privacy

03 Nov

Read More b

EDPS unveils revised Guidance on Generative AI, strengthening data protection in a rapidly changing digital era

30 Oct

Read More b

Publications

IDPC organises FRIA Workshop

24 Oct

Read More b

Strengthening Schengen security and preventing irregular migration: EU Entry Exit System enters into operation

22 Oct

Read More b

Coordinated Enforcement Framework: EDPB selects topic for 2026

21 Oct

Read More b

Draft UK adequacy decisions: EDPB adopts opinions

20 Oct

Read More b

IDPC launches new Podcast series

16 Oct

Read More b

AI Regulations come into force – IDPC designated as a Market Surveillance Authority for certain High-Risk AI Systems under Annex III of the AI Act

13 Oct

Read More b

DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints

09 Oct

Read More b

CJEU Advocate General: the publication of the name of any professional athlete who has infringed the anti-doping rules is contrary to EU law

25 Sep

Read More b

03
Nov

30
Oct

24
Oct

22
Oct

21
Oct

20
Oct

16
Oct

13
Oct

09
Oct

25
Sep

23
Sep