EDPB gives recommendations to make online shopping more respectful of users’ privacy, discusses the Digital Omnibus proposal and appoints new Deputy Chair

04 December 2025

During its latest plenary, the European Data Protection Board (EDPB) adopted recommendations on the legal basis for requiring the creation of user accounts on e-commerce websites. In addition, the Board had a preliminary discussion on the Digital Omnibus proposal and appointed the new EDPB Deputy Chair.

Internet users visit e-commerce websites for a variety of reasons, including making online purchases, taking advantage of promotions, or simply browsing products. When interacting with these websites, they may be asked to create an account, which can result in the collection and processing of personal data, as well as increased privacy and security risks.

The EDPB adopted recommendations to clarify when e-commerce websites can require their users to create an account.

As a general rule, users should have the option to engage with e-commerce websites, including the ability to make purchases, without creating an account. In such cases, the EDPB recommends that e-commerce websites offer a choice: either a 'guest' mode, allowing users make purchases without creating an account, or the option to voluntarily create an account. This approach minimises the collection and processing of personal data, and therefore aligns with the GDPR's principle of data protection by design and by default.

Preliminary discussion on the Digital Omnibus proposal

The EDPB had a preliminary discussion on the proposal for a Digital Omnibus, on which the EDPB and EDPS will issue a Joint Opinion.

In its Helsinki Statement, the EDPB made proposals in order to achieve enhanced clarity, support and engagement. The EDPB and the EDPS welcome the discussion on effective digital regulation and remain committed to finding solutions to make GDPR compliance easier, especially for small organisations.

The EDPB and the EDPS will focus on how the European Commission’s proposal will impact the fundamental rights of individuals and whether it will lead to simplification for organisations and more legal certainty.

Jelena Virant Burnik elected new Deputy Chair of the EDPB

At this week’s plenary, the members of the EDPB appointed Jelena Virant Burnik, Information Commissioner of the Republic of Slovenia, as new Deputy Chair of the Board.