Your cookie preferences

EDPB guidance · Art. 7 GDPR

We use technical cookies essential for the platform to work (login, security, sessions). We would also like to use analytics cookies to understand how to improve it.

You can accept all, reject all, or choose which categories to switch on.Your consent is valid for 6 months and you can withdraw it at any time from the footer.

You will find everything in our privacy notice.

All news
EDPB / EDPS July 30, 2026 6 min

Competition and data protection: the EDPB opens the table, and there is a deadline

On 30 July the EDPB and the European Commission announced a stakeholder event on their upcoming joint guidelines. It takes place remotely on 15 October 2026, and expressions of interest close on 28 August

TL;DR for the DPO

The EDPB and the European Commission are drafting joint guidelines on the interplay between competition and data protection, and before writing them they are listening. The event is on 15 October 2026, remote, and to take part you must express interest by 28 August. If you have clients in concentrated markets - platforms, marketplaces, large retail, digital services - this is an open door that closes in a few weeks.

What was announced

On 30 July 2026 the EDPB announced that, together with the European Commission, it is organising a remote stakeholder event as part of their joint work on upcoming guidelines on the interplay between competition and data protection. The date is 15 October 2026, and the stated purpose is to inform and support the ongoing work on the topic.

Individuals and organisations with relevant expertise may take part. Expressions of interest go through a dedicated form and the call is open until 28 August 2026. The 30 July announcement came a week after a save-the-date notice on 23 July: a sign the calendar was confirmed quickly.

The deadline is 28 August

It is a short window, and it falls in a month when firms are closed. A DPO advising clients in concentrated markets has a chance here to put operational experience in front of the drafters before the text exists, rather than commenting on it once it is in public consultation and the fundamental choices have already been made.

Why the EDPB is looking at competition

Because the two worlds have touched and will not come apart again. A dominant undertaking collects data no competitor can collect, and that data reinforces the dominant position: it is the loop competition law has learned to watch and that the GDPR never set out to regulate. From the opposite direction, consent given to an operator with no real market alternative raises a question about freedom of choice that is a data protection matter before it is a competition one.

The work sits within the cross-regulatory cooperation the EDPB has placed at the centre of its 2024-2027 strategy and of the Helsinki statement. It follows the same direction as the guidelines on the interplay between the DSA and the GDPR, adopted in September 2025 as the first of the series, and the parallel work under way on the DMA and the AI Act.

The picture it fits into

  • DSA and GDPR: guidelines adopted in September 2025, the first devoted to the intersection between the Regulation and the new European digital laws.
  • DMA and GDPR: joint guidelines with the Commission, in progress.
  • AI Act and data protection law: joint guidelines announced, expected by the end of 2026.
  • Competition and data protection: the table opening now, with the October event as the first public step.
  • Anti-money laundering: joint EDPB-AMLA guidelines, announced on 1 July 2026, with consultation expected in the first half of 2027.

What changes in daily work

In the immediate term, nothing: there are no new obligations and no text to apply. What changes is the horizon against which two questions already landing on the DPO's desk are read. The first is whether consent collected by an operator with no workable alternative is genuinely freely given within the meaning of Article 4(11). The second is whether data sharing between companies in the same group, or between commercial partners, can be read as a competitive advantage before it is read as processing needing a legal basis.

It is also worth noting what this announcement is NOT. It is not a public consultation on a draft: that comes later and will be open to everyone. This is the stage before, where it is decided what the document will be about. It is the moment when a contribution weighs most, and the moment when almost nobody sends one.

How to use it, practically

Even without applying, note the date: the guidelines that come out of this will say how the freedom of consent is assessed in a market with no alternatives. That is precisely the defence your largest clients will run, or face, over the next two years.

Official source:EDPB — Stakeholder event on guidelines on the interplay between data protection and competition law (30 July 2026)Official source:EDPB — Interplay between the DSA and the GDPR: EDPB adopts guidelines (12 September 2025)

Looking for a workspace for your DPO work?

DPO Workspace is built by a certified DPO. 30-day free trial.

Start free

Related articles

EDPB / EDPS
EDPBfirst statement on smart glasses

Smart glasses: the EDPB takes a position — users can be controllers, and people being filmed must be able to tell

They look like ordinary glasses, but they have a camera, a microphone and a connection. The EDPB publishes its first statement on smart glasses: when the user becomes a controller, why manufacturers and app providers cannot pass their obligations on to users, and what making a recording visible means in practice.

Oct 13, 2026New 5 min
EDPB / EDPS
25the authorities looking at your privacy notice this year, not at your registers

The year the authorities read the privacy notice: CEF 2026 on transparency

On 19 March 2026 the EDPB launched this year's coordinated enforcement action on the transparency and information obligations of Articles 12, 13 and 14 GDPR. Twenty-five authorities are taking part, each free to choose its method: inspections, questionnaires sent to controllers, reading the notices published on websites, sector reviews. National results will be aggregated in the second half of 2026 and the EDPB will publish a summary report with follow-up recommendations. For anyone running compliance the point is that this year the check starts from a text that is already public.

Oct 09, 2026New 7 min
EDPB / EDPS
13 novlast day to send comments to the consultation

When a fine, and when not: the EDPB writes down the part that was missing

On 21 September 2026 the European Data Protection Board adopted Guidelines 04/2026 on the exercise of the power to fine in relation to the other corrective powers, open to public consultation until 13 November 2026. They replace the old Article 29 Working Party guidelines and complete the 2022 ones on calculating the amount. The difference is substantive: those said how much, these say whether. And at the fourth step there is a presumption that shifts the burden of the defence.

Sep 21, 2026New 6 min