EDPS’s Annual Report 2025 highlights record legislative consultations and the AI transition within European institutions

11 May 2026

On 7 May 2026, the European Data Protection Supervisor (EDPS) published its Annual Report 2025, detailing a year of unprecedented activity and the operational launch of its expanded mandate under the EU’s Digital Rulebook.

In a year marked by the rapid evolution of artificial intelligence, the EDPS established a dedicated AI Unit and launched a landmark AI regulatory sandbox pilot project, allowing EU institutions to test AI systems under regulatory guidance. The report also highlights the largest number of legislative consultations in a single year to date, through which the EDPS provided expert advice on critical issues ranging from digital identity to GDPR modifications.

Wojciech Wiewiórowski, European Data Protection Supervisor, said: “In 2024, we took stock of our history, marking 20 years of the EDPS. But 2025 was about moving forward, turning strategic into active governance, particularly in the realm of artificial intelligence. While we cannot eliminate every digital risk, the EDPS continues to evolve to remain fully equipped to guide the EU administration through this transformation with expertise, independence and an unwavering focus on the rights of the citizen.”

In an example of this continuing evolution, 2025 saw the full activation of the EDPS AI Unit. Key achievements include the comprehensive mapping of the AI ecosystem across EU institutions, bodies, offices and agencies (EUIs) and the launch of a landmark AI regulatory sandbox pilot project. The AI Act Correspondents Network also deepened cooperation on AI challenges between EUIs. 2025 was also a foundational year for the EDPS’s upcoming role as market surveillance authority and notified body for EUIs under the AI Act. In preparation for its expanded scope, the authority continued to build operational readiness to supervise AI in sensitive sectors such as law enforcement and migration.

Read more here