The European Data Protection Board (EDPB) has started an enforcement action under the 2025 Coordinated Implementation Framework (CEF). After the coordinated action in 2024 focused on the data subject’s right of access, the focus of this year’s action is focused on the right to erasure or the “right to be forgotten” (Article 17 of the GDPR).
The Committee chose this topic during its plenary session in October 2024 because it is one of the most frequently used rights under the GDPR, and also a right about which supervisory authorities often receive complaints from individuals.
During 2025, 32 data protection supervisory authorities across Europe will participate in this initiative, including the Personal Data Protection Agency.
Supervisory authorities will soon contact a number of data controllers from different sectors across Europe, either by launching new official investigations or by conducting control checks.
Supervisory authorities will check how data controllers handle requests for erasure they receive, and in particular how they apply the conditions and exceptions for exercising this right.
The results of national actions will be consolidated and analysed to gain deeper insight into the topic, enabling targeted further activities at national and EU level.
The Coordinated Enforcement Framework (CEF) is a key initiative of the EDPB as part of its strategy for the period 2024-2027, aiming to improve enforcement and cooperation between data protection supervisory authorities.
Over the past three years, three previous CEF actions have been implemented on different topics:
- the use of cloud-based services in the public sector,
- the appointment and position of the data protection officer, and
- implementation of the right to access data by the controller.
More information is available at the link: https://www.edpb.europa.eu/news/news/2025/cef-2025-launch-coordinated-enforcement-right-erasure_en