EDPB Consultation on User Accounts for E-commerce Websites

The European Data Protection Board (EDPB) is seeking public comments on its Recommendations 2/2025, which address the legal basis required for e-commerce websites to mandate the creation of user accounts. This consultation aims to clarify data protection obligations under GDPR when personal data is processed for account creation, particularly concerning consent and legitimate interests.

Affected entities, primarily e-commerce platforms and technology providers operating within the EU, are invited to submit their feedback by February 12, 2026. While these recommendations are non-binding, they provide significant guidance on compliance. Submissions will be published on the EDPB website, and parties should be aware of potential access requests under Regulation 1049/2001.