General Data Protection Regulation: additional procedural rules relating to the enforcement of the Regulation
38 submissions from 32 organizations told the European Commission what they think about this file. Here is what each of them said, in their own words.
The Commission lists 89 submissions on this file. Shown here: the 38 from organizations. Not shown, by design: submissions from private individuals, which we never publish, and anything filed since our last weekly refresh.
Approval of the EP's first reading position by the Council (adoption of the legislative act) · 17 Nov 2025
Plenary Adopted First-Reading Position · 21 Oct 2025
Plenary Vote · 21 Oct 2025
Who showed up
25 submissions from industry — companies and their trade associations — against 9 from civil society: NGOs, consumer organizations, environmental groups and trade unions. That is 2.8 industry submissions for every one from civil society.
Industry 25Civil society 9Public authorities, academia, other 4
Groupings use the respondent type each organization selected when filing. Counting submissions, not organizations — a body that filed twice is counted twice.
What the room declares
25 of 32
in the EU Register
144
full-time lobbying staff
€11.5M+
declared costs a year
92
EP accreditations declared
Self-declared to the EU Transparency Register (snapshot 2 Sept 2026). The cost figure sums band floors, so the true total is higher.
The file, right now
The consultation closed on 4 Sept 2023 — it ran from 7 Jul 2023.
In the Otto Group’s view, it is to be welcomed that the European Commission has initiated a clarification of the procedural rules for the enforcement of the GDPR and has put forward a proposal for a regulation. It is imperative to make procedures more efficient and faster in order to make consistent and effective enforcement of the GDPR rules a reality across the EU.
Filed in German · English published by the European Commission
Bitkom welcomes the proposal and its intention to streamline cooperation between DPAs when enforcing the GDPR in cross-border cases, and to harmonize certain procedural aspects applied by Data Protection Authorities (DPAs). We also view this process as an opportunity for a broader conversation on how to improve harmonization.
The Information Technology Industry Council (ITI) the global association of the tech industry appreciates the opportunity to provide feedback on the European Commission's Proposal for a Regulation laying down additional procedural rules relating to the enforcement of the GDPR in cross-border cases (the GDPR Procedural Regulation).
The Centre for Information Policy Leadership (CIPL) welcomes the opportunity to provide comments on the proposal for a Regulation laying down additional procedural rules relating to the enforcement of the GDPR issued by the European Commission.
DIGITALEUROPE welcomes the proposed Regulation laying down additional procedural rules for the enforcement of the General Data Protection Regulation (GDPR). The proposal is an opportunity to reinforce the one-stop-shop (OSS) mechanism, which is central to the Digital Single Market. As is the proposals intention, this can be done by complementing, without reopening, the GDPR.
Bundesverband Digitale Wirtschaft (BVDW) e.V. The BVDW welcomes the possibility of issuing an opinion on the proposed regulation laying down additional procedural rules in cross-border cases. Past and present have made it clear that there are still procedures that are not optimally used or executed, but are different in the GDPR.
Filed in German · English published by the European Commission
The entry into application of the General Data Protection Regulation (GDPR) on 25 May 2018 led to companies becoming more responsible for the protection of personal data. In this context, La Poste Groupe strengthened its policy in this area. It has also led to a strengthening of the rights of individuals but also of the role of data protection authorities.
Filed in French · English published by the European Commission
noyb strongly supports the initiative launched by the European Commission aimed at strengthening and improving the application and enforcement of the General Data Protection Regulation (GDPR). Please find the attached submission with: - Cover Letter - An Issues List - High-Level Concepts Paper - A Suggestion for a Regulation
Please, find the detailed joint-feedback as attachment. Following the key messages: 1 Key Messages 1.1 It is strongly recommended to extend the understanding of enforcement by integrating complementing tools, such as Codes of Conduct, into the evaluation by the European Commission.
We welcome that the General Data Protection Regulation (GDPR) has created a common European high-level standard in terms of data protection. However, to guarantee a level playing field it is crucial that the GDPR is enforced in a harmonized way.
The Civil Liberties Union for Europe (hereinafter Liberties) welcomes the European Commissions initiative aimed at further specifying procedural rules relating to the enforcement of the General Data Protection Regulation (hereinafter GDPR). Liberties an EU-level watchdog and network organisation representing 19 human rights organisations from 18 Member States.
Please, find the detailed joint-feedback as attachment. Following the key messages: 1. It is strongly recommended to extend the understanding of enforcement by integrating complementing tools, such as Codes of Conduct, into the evaluation by the European Commission. Codes of Conduct strongly support harmonization across Europe, by allowing for particularizing ambiguous interpretations in sector-specific manners.
DIGITALEUROPE welcomes the European Commissions initiative to facilitate more harmonised procedural cooperation in cross-border enforcement of the General Data Protection Regulation (GDPR). We believe these efforts will greatly contribute to a reinforced one-stop-shop (OSS) mechanism, which we deem crucial for both businesses and data subjects.
Bitkom is thankful for the opportunity to contribute to the consultation and welcomes future occasions to offer its expertise in open discussions. We welcome the ECs initiative intended to streamline cooperation between DPAs when enforcing the GDPR in cross-border cases, and to harmonize certain procedural aspects applied by DPAs in cross-border cases.
Dear Sir or Madam, Please find attached AmCham EU's response to the call for evidence. AmCham EU has closely followed and participated in discussions on the General Data Protection Regulation (GDPR) throughout its legislative adoption and implementation processes.
The aim of the initiative on further specifying procedural rules relating to the enforcement of the General Data Protection Regulation (GDPR) is to streamline cooperation between national data protection supervisory authorities when enforcing the GDPR in cross-border cases.
Cdiscount highly welcomes the Commissions initiative to harmonize procedural aspects regarding the enforcement of the General Data Protection Regulation (GDPR) in cross-border cases. By doing so, the Commission would introduce more legal certainty for all parties and strengthen the right to defense through the establishment of a well-defined procedural framework.
Bonn, Bucharest, Dublin, Lisbon, Madrid, Milan, Paris, The Hague, Vienna, Warsaw CEDPO Statement Brussels, March 24th 2023 Ref: Further specifying procedural rules relating to the enforcement of the General Data Protection Regulation.
Thank you very much for the opportunity to provide feedback. BEUC welcomes the Commissions intention to propose a regulation that harmonises procedural rules on cross-border cases under the General Data Protection Regulation (GDPR). Please find BEUC's recommendations in attachment. We remain at your disposal for any question or comment you may have.
We hereby submit the views of VATM and our member companies with regard to the Call for Inputs on the procedural rules on enforcement established by Art. 60 and 65 of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, in the following, GDPR).
Adigitals comments on European Commissions call for evidence on Further specifying procedural rules relating to the enforcement of the General Data Protection Regulation [Please find attached the entire document] I. Preliminary Points a.
The entities affiliated to the Association of Employers of the Internet Branch, IAB Polska, present below and enclose requests for the European Commission’s initiative to further define procedural rules for the enforcement of the GDPR.
Filed in Polish · English published by the European Commission
With the General Data Protection (Regulation 2016/679, GDPR) approaching five years since its formal entry into force, DOT Europe welcomes the European Commissions initiative to support the robust enforcement of the GDPR and believes that the time is right to consider the operation of this landmark regulation to see what worked well, what did not and what could work better as well as of course identifying why.
The Information Technology Industry Council (ITI) is the premier global advocate for technology, representing the worlds most innovative companies. Founded in 1916, ITI is an international trade association with a team of professionals on four continents. We promote public policies and industry standards that advance competition and innovation worldwide.
The Centre for Information Policy Leadership (CIPL) submits feedback to the European Commissions (EC) call for evidence on further specifying procedural rules relating to the enforcement of the GDPR. We provide detailed comments in the document accompanying this response.
For effective enforcement of the GDPR, smooth cooperation and an orderly flow of information between all supervisory authorities is necessary. The GDPR speaks generally of supervisory authorities in Chapter 7. Although this term also includes the specific supervisory authorities for media and religious communities in addition to the state supervisory authorities, the participation of the specific supervisory…
Effective cooperation among Data Protection Authorities (DPAs) in cross-border cases is the key to harmonized implementation of the General Data Protection Regulation (GDPR) across the EU. The full potential of GDPR in putting data protection and privacy at the center of every economic and social sectors in the EU market can be unleashed only through coordinated interpretation and enforcement of the regulation.
The German Consumer Organisation (vzbv) welcomes the European Commission’s initiative to optimise cooperation between national data protection supervisory authorities in the enforcement of the General Data Protection Regulation (GDPR) in cross-border cases.
Filed in German · English published by the European Commission
In the Otto Group’s view, it is very welcome that the European Commission intends to initiate a clarification of the procedural rules for the enforcement of the GDPR in order to improve cooperation between national data protection authorities in the enforcement of the GDPR in cross-border cases.
Filed in German · English published by the European Commission
As the Bundesverband Digitale Wirtschaft (BVDW) e.V., we can fully confirm the need to improve cooperation between national data protection supervisory authorities in the enforcement of the GDPR in cross-border cases. In its invitation to comment, the European Commission identifies very important aspects that we, as an association, consider to be worth improving.
Filed in German · English published by the European Commission
European Digital Rights welcomes the initiative launched by the European Commission aimed at strengthening and improving the application and enforcement of the General Data Protection Regulation (GDPR). With the GDPR, the European Union has successfully increased data protection standards, bolstered awareness and created a ripple effect beyond the EU.
The initiative of the European Commission to streamline cooperation between national data protection authorities when enforcing the General Data Protection Regulation (GDPR) in cross-border cases has to be welcomed.
The Computer & Communications Industry Association (CCIA Europe) welcomes the opportunity to share our views on the European Commissions plan to introduce new procedural rules to improve the enforcement of cross-border data protection cases.
Access Now thanks the European Commission for the opportunity to provide feedback on this initiative aiming to further specify procedural rules relating to the enforcement of the General Data Protection Regulation.
Booking.com welcomes the opportunity to provide feedback on the call for evidence on the proposal on specifying procedural rules for the enforcement of the General Data Protection Regulation (GDPR). As a global online travel agency, Booking.com provides accommodation and other travel services such as flights, car rentals and attractions to travelers in Europe and beyond.
We highly appreciate the Commission's efforts to remove some of the procedural barriers to a more uniform approach to GDPR enforcement. We believe that all of the areas suggested by the Commission (and by the EDPB) are suitable for a greater degree of harmonisation.
Overall, Schibsted supports any effort to make the enforcement of the GDPR more efficient. We have looked at wishlist by the EDPB on this issue. We are of the opinion that there is not necessarily a need for the European Commission to address all the issues in the EDPB wish list as several of the issues seem to be of a nature that can already be solved by the DPAs through increasing the quality and level of…
Opinion of the European Academy of Freedom of Information and Data Protection e.V. in the context of the call for evidence on the European Commission’s proposal for an amendment to the General Data Protection Regulation The Commission’s proposal to improve cooperation between data protection authorities by supplementing and clarifying the rules on the cooperation and consistency mechanism in the GDPR deserves…
Filed in German · English published by the European Commission
Method. Every quote is verbatim from the organization’s own submission to the European Commission, trimmed to its opening passage and never summarized by a model. Where a submission was filed in another EU language we show the English text the European Commission publishes alongside it, labeled on the quote; the original is one click away at the source. Groupings use the respondent type the organization itself selected when filing. We deliberately do not label anyone “supportive” or “opposed” — you read what they wrote and draw your own conclusion. Organizations only, never individuals. Reused under Commission Decision 2011/833/EU; the European Commission is not liable for this reuse.