The European Data Protection Supervisor (EDPS) has issued Opinion 17/2026 on the European Commission’s Proposal for a Regulation amending Regulation (EU) 2018/1725, the EU Data Protection Regulation (EUDPR), which governs the processing of personal data by the Union’s institutions, bodies, offices and agencies.

The Proposal aims to streamline and ensure consistency of the data protection framework applicable to the processing of operational personal data by EU Justice and Home Affairs (JHA) agencies and bodies, including Europol, Eurojust, the European Public Prosecutor’s Office (EPPO) and, to a limited extent, the European Border and Coast Guard Agency (Frontex).

Wojciech Wiewiórowski, Supervisor, said: “A consistent and effective data protection framework for EU JHA agencies is something we have long called for, and we therefore welcome the objective of this Proposal. However, such an objective can only be achieved with effective supervision and enforcement. This Proposal represents an important opportunity to address existing challenges in this regard and to strengthen the application of the rules. This opportunity should not be missed.”

While welcoming the steps taken by the Proposal towards strengthening the existing data protection framework for EU JHA agencies and bodies, the EDPS observes that additional improvements are needed for the Proposal to fully achieve its stated objectives.

The EDPS emphasises that achieving a coherent and streamlined legal framework, and ensuring its consistent application, requires effective supervision and enforcement. This is all the more important in the area of criminal justice and law enforcement, where the processing of personal data by competent authorities is especially complex and sensitive.