The European Data Protection Board (EDPB) has launched the Coordinated Enforcement Framework (CEF) for 2024, engaging 31 Data Protection Authorities (DPAs) across the EEA, including 7 German State-level DPAs.

Focused on the right of access, chosen during the October 2023 plenary, it's a core data protection aspect frequently exercised and complained about. This right empowers individuals to ensure their personal data is lawfully processed by organizations. Moreover, it often facilitates the exercise of other data protection rights like rectification and erasure. The initiative aims to enhance compliance and accountability in data processing practices throughout the European region.

In 2023, the EDPB issued Guidelines on data subject rights, specifically focusing on the Right of Access, assisting organizations in handling data access requests in compliance with the General Data Protection Regulation (GDPR). Participating DPAs will employ the CEF through questionnaires, potential investigations, and follow-up to assess organizational compliances. Results will be collectively analyzed, guiding DPAs in deciding further supervision and enforcement actions.

This marks the third CEF initiative to enhance enforcement cohesion among DPAs and streamline cooperation. The EDPB will publish a comprehensive report on the joint initiative's outcomes, providing valuable insights and facilitating targeted follow-ups at the EU level.