European Union

ESMA, UK Regulators Sign MoU on DORA ICT Oversight

The European Supervisory Authorities (ESAs) and UK financial regulators (BoE, PRA, FCA) have signed a Memorandum of Understanding (MoU) to enhance cooperation on overseeing critical ICT third-party service providers under DORA. This agreement facilitates information sharing and coordinated oversight activities.

EDPB Rules of Procedure for Informal Panel of EU DPAs

The European Data Protection Board (EDPB) has published its Rules of Procedure for the informal panel of EU Data Protection Authorities (DPAs) concerning the EU-US Data Privacy Framework. This guidance outlines the operational framework for the DPAs in their oversight of the framework.

EDPB Opinion on Dutch SA's draft decision on ABB Group rules

The European Data Protection Board (EDPB) has issued Opinion 4/2026 regarding a draft decision by the Dutch Supervisory Authority concerning ABB Group's Binding Corporate Rules (BCRs). This opinion addresses the international transfer of data and the adequacy of ABB's proposed rules.

EDPB Opinion on Dutch Authority's Draft Decision for FrieslandCampina

The European Data Protection Board (EDPB) has issued Opinion 3/2026 regarding a draft decision by the Dutch Data Protection Authority concerning FrieslandCampina's Binding Corporate Rules (BCRs). This opinion addresses international data transfers and compliance with GDPR.

EDPB Opinion on Dutch Supervisory Authority's AkzoNobel Group Decision

The European Data Protection Board (EDPB) has adopted an opinion regarding a decision by the Dutch Supervisory Authority concerning AkzoNobel Group's Binding Corporate Rules (BCRs). This opinion addresses international data transfers and compliance with GDPR.

EDPB Opinion on Heineken Group BCR Draft Decision

The European Data Protection Board (EDPB) has issued Opinion 1/2026 regarding a draft decision by the Dutch Supervisory Authority concerning Heineken Group's Binding Corporate Rules (BCRs). This opinion addresses the international transfer of data under GDPR.