The European Data Protection Board (EDPB) has issued an opinion on age verification of users in digital services at its February plenary session. The Board also issued recommendations on the World Anti-Doping Agency (WADA) 2027 World Anti-Doping Code.
The EDPB’s opinion sets out ten principles that must be taken into account when verifying a person’s age or age group in digital services in order to comply with data protection requirements. The opinion aims to ensure a consistent European approach to age verification to protect minors, while respecting data protection principles.
“Age control is important to prevent children from accessing content that is inappropriate for them. At the same time, the age verification method should infringe on people’s rights and privacy as little as possible, and children’s personal data must be protected. The principles described by the Data Protection Council help operators to assess a person’s age in accordance with data protection principles and at the same time protect the well-being of children,” says Anu Talus , Chair of the Data Protection Council.
The Board cooperates with the European Commission within the framework of the Digital Services Regulation working group.
Opinion 1/2025 of the Data Protection Board on the Council’s website in EnglishLink to another site
Recommendations for the processing of personal data in anti-doping activities
The Data Protection Board has issued recommendations on the WADA 2027 World Anti-Doping Code. It is important to protect the personal data of athletes when they are processed for anti-doping purposes. Anti-doping activities often involve the processing of sensitive personal data, such as health data obtained from biological samples.
The Data Protection Board is assessing the compatibility of WADA’s International Standard for Data Protection (ISDP) with data protection legislation. National Anti-Doping Organizations should be subject to a standard that is equivalent to the requirements of the GDPR.
The EDPB recommendations address key data protection principles, such as the basis for processing personal data and the requirement for data to be used for a specific purpose. Individuals must also be informed openly about the processing of their personal data and be able to exercise their rights effectively.
Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code on the Council’s website in English