Summary

• The EDPB is prioritizing harmonisation, enforcement cooperation, and shared guidance across EU data protection authorities.
• AI-related privacy issues are becoming more operational, especially around generative AI, data scraping, and the GDPR-AI Act interface.
• Supervisory authorities are resisting attempts to narrow the GDPR definition of personal data, preserving broad coverage for pseudonymized and AI-related data uses.
• Cross-border enforcement remains a live legal issue, with judicial oversight of EDPB binding decisions now clarified by the ECJ.
• Compliance expectations are extending into HR systems, where international transfers, DPIAs, vendor review, and breach readiness are increasingly formalized.
• The topic is coherent and structurally stable, with most material reinforcing the same regulatory direction rather than introducing separate subtopics.