EDPB Adopts 2026-2027 Work Programme for GDPR Compliance

EDPB News

Published February 13th, 2026

Detected February 13th, 2026

Summary

The European Data Protection Board (EDPB) has adopted its work programme for 2026-2027, focusing on making GDPR compliance easier. Key initiatives include developing ready-to-use templates for organizations on legitimate interest assessments, records of processing activities, and privacy notices.

View original document View source feed page

What changed

The EDPB has released its work programme for 2026-2027, which is aligned with its 2024-2027 strategy and the Helsinki Statement. A primary goal is to simplify GDPR compliance for organizations. To achieve this, the EDPB plans to develop several ready-to-use templates, including those for legitimate interest assessments, records of processing activities, and privacy notices. These templates will supplement existing ones for data breach notifications and data protection impact assessments.

This initiative aims to strengthen dialogue with stakeholders and facilitate GDPR compliance. While this notice outlines future plans and does not impose immediate new obligations, organizations should be aware of the upcoming availability of these compliance tools. The EDPB's focus on easing compliance suggests a continued effort to provide practical support for data protection obligations.

What to do next

Review upcoming EDPB guidance and templates for GDPR compliance tools.
Assess internal processes for alignment with potential new template formats for legitimate interest assessments, records of processing, and privacy notices.

Source document (simplified)

Brussels, 13 February - The EDPB has recently adopted its work programme for 2026-2027, which is grounded in the four pillars of the EDPB strategy 2024-2027.

The work programme is based on the priorities set out in the EDPB strategy and it also takes into account the commitments made in the Helsinki Statement on enhanced clarity, support and engagement aimed at making GDPR compliance easier, strengthening consistency, and boosting cross-regulatory cooperation.

Easing compliance is at the top of the EDPB agenda

The work programme reaffirms the commitment of the EDPB to simplifying GDPR compliance for organisations, which includes the development of a series of ready-to-use templates for organisations. Following the public consultation on this, the EDPB decided to develop templates for legitimate interest assessment, record of processing activities and privacy notice/policy in addition to the already announced templates for data breach notifications and data protection impact assessment.

This is also in line with both the Helsinki Statement’s objectives of strengthening dialogue with stakeholders and facilitating GDPR compliance for organisations.

More information about the EDPB work programme can be found here.