Story perspectives

EDPB Issues Guidelines for DSA and GDPR Compliance

11/1/2025

Summary

Story summary

The European Data Protection Board (EDPB) issued guidelines on how the Digital Services Act and GDPR interact, addressing illegal content, recommendation algorithms, and minors' protection.
Companies must align DSA compliance with GDPR, especially regarding personal data processing.
The guidelines urge benchmarking compliance documentation and participation in the public consultation by October 31, 2025.
The Digital Fairness Act (DFA) would update consumer protection standards but could over-regulate and affect personalized advertising.

History

Historical Context

The General Data Protection Regulation (GDPR), enacted on May 25, 2018, unified data protection laws across the EU, enhancing user control over personal data. Following this, the Digital Services Act (DSA) was adopted in 2022 to regulate online platforms, addressing illegal content and protecting minors. These regulations reflect Europe's commitment to privacy rights amid ongoing debates about balancing regulation and innovation in the digital economy.

1 of 2

Story summary

The European Data Protection Board (EDPB) issued guidelines on how the Digital Services Act and GDPR interact, addressing illegal content, recommendation algorithms, and minors' protection.
Companies must align DSA compliance with GDPR, especially regarding personal data processing.
The guidelines urge benchmarking compliance documentation and participation in the public consultation by October 31, 2025.
The Digital Fairness Act (DFA) would update consumer protection standards but could over-regulate and affect personalized advertising.

1 / 2