Module 11 · The EDPB & the EDPS
The (EDPB) replaced the Article 29 Working Party and ensures consistent application of the GDPR. The 30 EEA SAs each send a representative, but only the 27 EU representatives vote; the EDPS has limited voting rights and the Commission has no vote. The EDPS separately supervises the EU institutions' own compliance.
The EDPB replaced the Article 29 Working Party and is composed of a representative of every Member State's SA, presided over by an elected chair. WP29 opinions remain valid where they align with the GDPR.
| Body | Attend | Vote |
|---|---|---|
| EEA Member State SAs | 30 EEA reps attend | - |
| EU Member State SAs | - | Only the 27 EU reps actively participate / vote |
| EDPS | Participates | Limited voting rights |
| Commission | Participates | No voting rights |
- Monitor correct/consistent application and oversee the consistency mechanism
- Issue guidance and advice to the Commission
- Issue guidelines, recommendations and best practices (automated decisions, breach determination/notification, high-risk thresholds)
- Preside over dispute resolution
The European Data Protection Supervisor (EDPS) oversees the EU institutions' (Commission, Parliament) compliance, plays an ambassadorial role and issues opinions.
30 EEA states attend but only 27 EU representatives vote. The EDPS has limited voting rights; the Commission has none.