On 17 September 2026 the European Data Protection Board adopted guidelines on the use of administrative fines by data protection authorities and finalised guidance on the interaction between the Digital Services Act (DSA) and the GDPR. The guidelines outline a five‑step method for assessing fines and describe corrective measures such as warnings, injunctions and service limitations. A public consultation on the guidelines runs until 13 November 2026.
Why it matters: The new EDPB guidance clarifies how authorities should levy fines and align DSA obligations with GDPR rules, impacting controllers, processors and digital platforms across the EU.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
