European Data Protection Supervisor

What European Data Protection Supervisor does

The European Data Protection Supervisor (EDPS) is the independent supervisory authority of the European Union responsible for monitoring and enforcing data protection compliance across all EU institutions, bodies, offices, and agencies (EUIs). Established by Regulation (EC) No 45/2001 and operational since 2004, EDPS operates under the updated Regulation (EU) 2018/1725, which grants it investigative, corrective, and authorization powers, including enforcement of administrative sanctions. It reports to and is funded through the EU general budget, serving EUIs as its sole mandated constituency without commercial monetization. The EDPS also advises EU lawmakers on legislative proposals affecting privacy, coordinates supervision of large-scale EU IT systems such as Eurodac and the Visa Information System, and conducts international cooperation with over 130 data protection authorities globally through the Global Privacy Assembly.

EDPS maintains a portfolio of open-source technology products and knowledge assets. Its technology-monitoring suite includes TechSonar (a foresight product tracking emerging technologies on 1-year and 3-5 year horizons), TechDispatch (in-depth technology analyses), and the Internet Privacy Engineering Network (IPEN), a community initiative launched in 2014 that convenes authorities, academia, and industry to develop privacy-enhancing tooling. EDPS also develops and releases under EUPL-1.2 license two inspection tools: the Website Evidence Collector (WEC), a command-line tool introduced in 2018 that automates evidence collection on cookies, tracking technologies, HTML5 storage, and data transfers; and WEC Online, a multi-user web application launched in 2020 offering centralized deployment and automated report generation. These tools are hosted on code.europa.eu.

The organization's revenue model is non-commercial; EDPS does not charge for its supervisory services, publications, or open-source tools, and operates without a traditional go-to-market motion. Communication is delivered via its official website, a multilingual social media footprint (X, LinkedIn, YouTube, Spotify, BlueSky, Mastodon, Instagram), press releases, and participation in major European and international privacy conferences. In August 2024, EDPS's mandate expanded to include supervision of AI systems used by EU institutions under the EU AI Act, and the organization has since grown a dedicated AI Unit, published targeted AI analyses, and deepened bilateral partnerships — including a revised MoU with the European Union Agency for Fundamental Rights (FRA) in June 2026 and a prior MoU with the UK Information Commissioner's Office in November 2023.

Name

European Data Protection Supervisor

Legal name

European Data Protection Supervisor

Website

https://edps.europa.eu

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

51–100 employees

Short description

The European Data Protection Supervisor is the independent EU supervisory authority monitoring data protection compliance across EU institutions under Regulation (EU) 2018/1725, advising EU lawmakers, supervising large-scale IT systems, and developing open-source privacy inspection tools.

Ownership category

akta.pro rank

Product category

Data Protection Regulatory Authority

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (926150), Public Administration (92)

SIC

Foreign Governments (8888)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

Keywords

• Data protection supervision
• Privacy regulation enforcement
• EU institutional compliance
• Technology monitoring privacy
• Independent supervisory authority

Headquarters

HQ city

Brussels

HQ country

Belgium

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Others

Distribution channels2 records

Marketing channels12 records

Core offering

The EDPS operates as the independent supervisory authority for data protection across all EU institutions, bodies, offices, and agencies, exercising statutory powers of investigation, correction, and authorization under Regulation (EU) 2018/1725. Its core offering combines regulatory supervision and enforcement, legislative advisory opinions, technology foresight monitoring, and coordination of large-scale EU IT systems, supplemented by open-source inspection tools (WEC, WEC Online) and ongoing community engagement through the Internet Privacy Engineering Network (IPEN).

Product overview

The European Data Protection Supervisor (EDPS) operates as the independent data protection authority of the EU, offering a portfolio of technology monitoring, inspection, and publication products. The core offerings include TechSonar (foresight monitoring of emerging technologies), TechDispatch (in-depth technology analysis), and the Internet Privacy Engineering Network (IPEN) for community collaboration. EDPS also provides two open-source inspection tools: the Website Evidence Collector (WEC) command-line tool and WEC Online web application for automated website privacy compliance verification. These are complemented by publications including Annual Reports, podcasts, and newsletters. All software tools are released under EUPL-1.2 license and are available on code.europa.eu. The EDPS does not operate a commercial SaaS product but rather provides regulatory guidance, monitoring publications, and reusable open-source inspection software for EU institutions and data protection practitioners.

Differentiator

Problem solved

Functional benefit

Products and services

• TechSonar Flagship foresight activity of the EDPS that monitors and reports on technologies with potential privacy and data protection impacts across short-term (1 year) and medium-term (3-5 year) horizons. Each 'TechTrend' includes a brief description, privacy impact assessment, and recommended further reading. Targeted at EU institutional decision-makers, regulators, and privacy practitioners.
• TechDispatch Provides deeper, more detailed analysis of specific technologies that warrant EDPS attention, offering factual descriptions, preliminary data protection impact assessments, and recommended readings. Targets a narrower audience than TechSonar including technology specialists and EU institutional stakeholders.
• Internet Privacy Engineering Network (IPEN) Initiative launched in 2014 to promote privacy engineering, hosting annual events that bring together authorities, academia, open-source projects, and private companies to develop reusable technical tools and design patterns for data protection challenges. Targeted at privacy engineers, regulators, academics, and developers.
• Website Evidence Collector (WEC) Open-source command-line tool developed in 2018 that automates the collection of evidence on how websites process personal data, including cookies, tracking technologies, HTML5 storage, screenshots, HTTP links, and HAR files. Enables reproducible, reliable, and rapid evidence gathering for compliance verification. Licensed under EUPL-1.2 and available on code.europa.eu. Targeted at regulators, DPOs, and compliance professionals.
• WEC Online Web-based multi-user application built on WEC with a user-friendly interface. Allows organizations to centrally deploy and provide access to members for automated website evidence collection and summary report generation. Available as self-hosted solution or hosted service for EU institutions.
• EDPS Annual Report Annual publication summarizing EDPS supervisory activities, policy consultations, technology monitoring, and key actions. Available in all EU official languages. Recent editions include the Annual Report 2025 covering AI supervision expansion, 145 legislative consultations, and international data transfer scrutiny.
• EDPS Podcast Series Audio and video content series including 'Newsletter Digest' (exploring EU digital landscape topics) and 'Espresso with the EDPS' (video series on AI literacy and data protection topics). Distributed via Spotify and YouTube channels.
• Data Protection and Privacy Tools Catalog Collection of open-source software tools and resources for privacy-enhancing technologies, including the WEC and WEC Online inspection tools. Available under EUPL-1.2 license on code.europa.eu.

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Partnerships

Nine partnerships are on record, tiered major, core and moderate.

• European Union Agency for Fundamental Rights (FRA)majorStrategic or Co-development Partner · 29 June 2026Revised Memorandum of Understanding signed on 29 June 2026 to strengthen cooperation between EDPS and FRA. The MoU aims to enhance joint work on fundamental rights and data protection matters.
• UK Information Commissioner's Office (ICO)majorStrategic or Co-development Partner · 9 November 2023Memorandum of Understanding signed November 9, 2023 to strengthen their joint task of safeguarding people's rights to data protection and privacy. EDPS and ICO work together internationally on data protection matters.
• Global Privacy Assembly (GPA)coreStrategic or Co-development Partner · 1 January 2018EDPS is a member of the Global Privacy Assembly, the leading global forum for data protection and privacy authorities with over 130 members worldwide. EDPS co-chairs the GPA Working Group on Ethics and Data Protection in AI (AIWG) and serves as main sponsor of the 2023 GPA Resolution on Generative AI Systems.
• Council of EuropecoreStrategic or Co-development PartnerEDPS holds observer status in Council of Europe expert groups including the Consultative Committee (TPD) for Convention 108, and represents GPA in TPD. EDPS monitors negotiations on AI Convention under the Committee on AI (CAI).
• OECDmoderateStrategic or Co-development PartnerEDPS participates as observer in OECD working groups including the Working Party on Data Governance and Privacy (DGP) and Working Party on AI (AIGO). Provides comments on data protection and privacy recommendations.
• G7 Data Protection AuthoritiesmajorStrategic or Co-development PartnerEDPS represents the EU at G7 Data Protection Authorities Roundtable discussions alongside authorities from Germany, France, Italy, Japan, Canada, UK, and USA. Discusses common actions on generative AI, data flows, emerging technologies, and enforcement strategies.
• European Data Protection Board (EDPB)coreStrategic or Co-development PartnerEDPS works closely with EDPB and national supervisory authorities to ensure consistent application of data protection rules. EDPS contributes to cooperation between EU DPAs and coordinates supervision of large-scale IT systems.
• Berlin Group (International Working Group on Data Protection in Telecommunications)moderateStrategic or Co-development PartnerIWGDPT aims to ensure high and uniform level of data protection internationally based on democratic principles and fundamental rights. EDPS regularly participates and contributes to papers. Chaired by German BfDI.
• European Union institutions, bodies, offices and agenciescoreStrategic or Co-development PartnerEDPS provides DPO network coordination, holds regular EDPS-DPO meetings (58th meeting June 2026 in Brussels), and provides guidance and support to DPOs across all EUIs.

Scale indicators8 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Commission Nationale de l'Informatique et des Libertés (CNIL): France's national data protection authority and one of the most active EU DPAs. Directly comparable in supervisory/regulatory role, investigations, guidance, and enforcement against data controllers.
• Autoriteit Persoonsgegevens (AP): Netherlands' data protection authority; direct counterpart to EDPS in supervisory function and EDPB coordination, with comparable enforcement powers within its jurisdiction.
• European Data Protection Board (EDPB): Independent EU body composed of national DPAs; the closest peer to EDPS in mandate, structure, and EU-level data protection focus. EDPS regularly cooperates with EDPB to ensure consistent application of GDPR-equivalent rules.
• Agencia Española de Protección de Datos (AEPD): Spain's data protection authority; comparable independent regulator engaged in EDPB cooperation, GDPR enforcement, and public guidance, sitting alongside EDPS in the EU supervisory ecosystem.
• Information Commissioner's Office (ICO): UK's independent data protection authority; EDPS has a formal MoU with ICO since 2023. Comparable in enforcing data protection law, issuing guidance, conducting investigations, and engaging internationally.
• Garante per la protezione dei dati personali: Italy's data protection authority; comparable in enforcing GDPR at the national level and contributing to EDPB consistency mechanisms alongside EDPS.
• Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI): Germany's federal data protection commissioner; chairs the Berlin Group (IWGDPT), in which EDPS participates. Comparable regulatory authority and international coordination role within EU data protection.

Emerging players

• Privacy International: UK-based NGO focused on privacy and surveillance issues; emerges from the same broader data protection community as EDPS (it engages in GPA discussions and Council of Europe processes). Thematically aligned though not a peer regulator.

Broad incumbents

• U.S. Federal Trade Commission (FTC): U.S. federal consumer protection and competition authority that has become a de facto U.S. data privacy enforcer. Broader in scope than EDPS but overlapping in function (privacy enforcement, large-scale investigations against major tech firms).

Others

• Global Privacy Assembly (GPA): Forum of 130+ data protection and privacy authorities worldwide; EDPS is an active member, co-chair of the Ethics & AI working group, and sponsor of key resolutions. Not a regulator itself, but the principal multilateral venue through which EDPS operates internationally.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/EU_EDPS
• YouTubeyoutube.com/user/EDPS2011
• LinkedInlinkedin.com/company/edps
• Instagraminstagram.com/eu_edps

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about European Data Protection Supervisor