Launch of Coordinated Enforcement Framework 2026 – IDPC

19 March 2026

The Information and Data Protection Commissioner (IDPC) is participating in the fifth European Data Protection Board’s (EDPB) Coordinated Enforcement Action on compliance with the obligations of transparency and information under the General Data Protection Regulation (GDPR).

The GDPR requires that individuals are informed when their personal data is being processed as set out in articles 12, 13 and 14. This obligation ensures transparency by requiring controllers to clearly explain how and why personal data is processed. The right to be informed is a core element of transparency and data protection which ensures that individuals can exercise greater control over their data.

The IDPC is participating in this Coordinated Enforcement Framework (CEF) alongside another 24 data protection authorities (DPAs) of the European Economic Area (EEA). Prior CEF topics in which the IDPC took an active part concerned the role of data protection officers, the right of access to personal data and the right to erasure of personal data.

To carry out this Coordinated Enforcement Action, the IDPC will conduct a fact-finding exercise, primarily by means of a questionnaire which will be sent out to controllers across the private sector, aimed at analysing how the legal obligations of transparency and information are applied.  Eventually, the results of this joint action will be aggregated and analysed together in a coordinated manner at national level and then with the other DPAs of the EEA to decide on further supervision and enforcement actions, if necessary. Ultimately the EDPB will publish a report on the outcome of this analysis, once the coordinated enforcement action is concluded. 

The CEF is aimed at streamlining enforcement and cooperation among DPAs. Further information on the previous CEF initiatives Malta contributed to can be found via the following links:

The 2025 CEF action on the right to erasure - click here 

The 2024 CEF actions on the right of access - click here

The 2023 CEF action on the designation and position of data protection officers - click here

Read more on the CEF 2026 here