EDPB and European Commission Release Joint Guidelines Clarifying Links Between DMA and GDPR

Written by Jeremy Werner

Jeremy is an experienced journalist, skilled communicator, and constant learner with a passion for storytelling and a track record of crafting compelling narratives. He has a diverse background in broadcast journalism, AI, public relations, data science, and social media management.
Posted on 10/27/2025
In News

The European Data Protection Board (EDPB) and the European Commission have published their first-ever joint guidelines to clarify how the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) interact, aiming to simplify compliance and strengthen consistency across Europe’s digital economy.

 

Announced on October 9, the guidelines mark a milestone in regulatory cooperation between the EU’s competition and data protection authorities. The document outlines how gatekeepers—large digital platforms covered by the DMA—can meet their obligations under both frameworks while ensuring privacy, fairness, and market contestability.

 

“These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission,” said EDPB Chair Anu Talus. “This approach maximises usefulness of the guidance by simplifying compliance for businesses and bringing enhanced legal certainty to them.”

 

The DMA and GDPR both govern data processing in the digital sector but pursue complementary goals: the GDPR protects personal data and privacy, while the DMA promotes fair and open digital markets. The new guidelines provide practical clarity on where these two frameworks intersect, such as the use of personal data for targeted advertising, interoperability between messaging platforms, and data portability.

 

In particular, the EDPB and Commission explain how gatekeepers must handle consent and user choice under Article 5(2) of the DMA in line with GDPR standards, ensuring lawful data combination and cross-use across core platform services.

 

The guidelines are now open for public consultation until December 4, 2025, with final adoption expected next year.

 

The EDPB and the Commission also confirmed plans for further joint guidance, including on the interplay between the EU’s forthcoming AI Act and existing data protection laws, to maintain coherence in Europe’s rapidly evolving digital regulatory landscape.

 

Need Help?

 

If you have questions or concerns about how to navigate the global AI regulatory landscape, don’t hesitate to reach out to BABL AI. Their Audit Experts can offer valuable insight, and ensure you’re informed and compliant.

 

Subscribe to our Newsletter

Keep up with the latest on BABL AI, AI Auditing and
AI Governance News by subscribing to our news letter