The European Data Protection Board (EDPB) held its 115th plenary meeting. The Information and Data Protection Commissioner’s Office was represented at this meeting by Commissioner Mr. Besnik Dervishi and by the Director of Legal Affairs and Integration Mr. Klajdi Dvorani.
The focus of the proceedings was the report on the right to erasure, part of the Coordinated Enforcement Action 2025, which summarizes the findings of national authorities on the implementation of Article 17 of the GDPR. The report highlights good practices and challenges in the field of implementation of this right, including the lack of structured internal procedures, difficulties in setting retention periods and managing data backups.
The members of the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) also discussed and adopted the proposal for a Regulation on Artificial Intelligence (AI) and the Protection of Personal Data (Digital Omnibus), which aims to simplify the legal framework while maintaining a high level of protection of rights and contains recommendations on exceptions to data processing in the context of AI, abusive requests, automated decision-making and the supervision of e-Privacy rules.
Another point of discussion was the European Biotechnology Act, which addresses the challenges of data protection in new technological contexts, such as artificial intelligence, clinical trials and e-government.
The two-day meeting on 10-11 February 2026 also reviewed the Board’s 2026–2027 work programme, which sets out the priorities for the second phase of the EDPB Strategy 2024–2027, as well as the approved budget for 2026, which supports the expansion of the Secretariat’s capacities and cooperation between supervisory authorities. New initiatives to improve cooperation between European regulators and final reports on handling data breaches and anonymisation and pseudonymisation processes were also presented.
The participation of the Commissioner’s Office in these proceedings constitutes an important opportunity to closely follow regulatory developments at European level in the field of personal data protection.
