European Data Protection Supervisor (EDPS)

Overview

• Role: Ensures that EU institutions and bodies respect people's right to privacy when processing their personal data
• Supervisor: Wojciech Wiewiórowski
• Established in: 2004
• Location: Brussels (Belgium)
• Website: European Data Protection Supervisor

The EU institutions and bodies sometimes process citizens' personal information - in electronic, written or visual format - in the course of their duties. Processing includes collecting, recording, storing, retrieving, sending, blocking or erasing data. It is the task of the European Data Protection Supervisor (EDPS) to uphold the strict privacy rules governing these activities.

What does the EDPS do?

• supervises the EU administration's processing of personal data to ensure compliance with privacy rules
• advises EU institutions and bodies on all aspects of personal data processing and related policies and legislation
• handles complaints and conducts inquiries
• works with the national authorities of EU countries to ensure consistency in data protection
• monitors new technologies that might have an impact on data protection

How does the EDPS work?

The Supervisor is appointed for a renewable 5-year term of office. For everyday operations, the EDPS comprises 2 main entities:

• Supervision and Enforcement - evaluates data protection compliance by EU institutions and bodies.
• Policy and Consultation - advises EU legislators on data protection issues in various policy areas and new legislative proposals.

The EDPS and you

The EU institutions and bodies must not process personal data on your

• racial or ethnic origin
• political opinions
• religious or philosophical views
• trade-union membership

Nor may they process data on your health or sexual orientation, unless these are needed for health care purposes. Even then, this must be done by a health professional or other person sworn to professional secrecy.

If you believe that your right to privacy has been infringed by an EU institution or body, you should first tell the EU staff members responsible for processing your data in the instance where you think the infringement was committed. If you are not satisfied with the outcome, contact the data protection officer of the EU institution or body which you believe has committed the infringement.

If this fails, you can make a complaint to the EDPS using a complaint submission form. The European Data Protection Supervisor will investigate and let you know whether they agree with your complaint and, if so, how the situation is being rectified.

If you disagree with the EDPS's decision, you may take the matter to the Court of Justice of the EU.

Further information

Who's who

Opinions

Publications

Reference library

Jobs