Resources

Go back

Next Steps for EU law and Regulation for the Digital World

On 4 September, Privacy Next attended the Centre for European Policy Studies (CEPS) event for the launch of the CEPS Task Force report, Next Steps for EU law and Regulation for the Digital World.

This project examined how the EU’s rapidly expanding digital regulatory framework can be streamlined and improved. Regarding data protection, the report argues that the GDPR gives insufficient practical effect to the EU principle of proportionality and fails to adequately balance data protection against other legitimate interests, including innovation, research, public health, competitiveness, and other fundamental rights. Although a GRPR recital acknowledges proportionality, there is no operative mechanism to implement it. As a result, courts and the EDPB have focused almost exclusively on privacy protection, marginalising other EU objectives and interests.

Further, the report suggests the EDPB’s current decision-making process lacks sufficient accountability and consideration of proportionality. It notes that EDPB decisions are difficult for affected parties to challenge directly and that there is no meaningful appeal route. The report calls for reforms that should introduce stronger accountability and judicial review mechanisms for the EDPB.

The report also highlights growing tensions and inconsistencies between the GDPR and newer EU laws such as the Digital Markets Act, Data Act, European Health Data Space, and cybersecurity legislation. It calls for future reforms that better reconcile overlapping policy objectives and reduce regulatory complexity.