The European Data Protection Board (EDPB) has taken decisive steps to strengthen artificial intelligence (AI) regulation and data protection across the EU. In its February plenary meeting, the Board announced the formation of a new AI enforcement task force, adopted a comprehensive statement on age assurance, and issued recommendations on the 2027 World Anti-Doping Agency (WADA) Code.
In a move to bolster enforcement of AI regulations, the EDPB has extended the scope of its existing ChatGPT task force, transforming it into a broader AI enforcement initiative. The new task force will support national data protection authorities (DPAs) in handling AI-related complaints and ensuring companies remain compliant with the General Data Protection Regulation (GDPR).
Recognizing the rapid evolution of AI technologies and their impact on data privacy, EDPB Chair Anu Talus emphasized the need for coordinated action. “The GDPR has been designed to maintain high data protection standards while fully leveraging the potential of innovation, such as AI, to benefit our economy. The EDPB’s task force on AI enforcement and the future quick response team will play a crucial role in ensuring this balance, coordinating the DPAs’ actions and supporting them in navigating the complexities of AI while upholding strong data protection principles,” Talus said.
The EDPB also announced plans to establish a “quick response team” to address urgent AI-related privacy concerns, reinforcing its commitment to proactive regulatory oversight.
The Board has also released a statement outlining ten principles for GDPR-compliant age assurance methods. These guidelines aim to balance protecting minors online while ensuring minimal intrusion into personal data. The principles emphasize the need for age verification methods that are both effective and privacy-conscious, advocating for solutions that limit data retention and prevent unnecessary profiling.
Age assurance measures have become increasingly relevant as EU legislation, including the Digital Services Act and the Audiovisual Media Services Directive, requires platforms to implement stricter age verification controls. The EDPB’s statement underscores that companies must ensure transparency, fairness, and proportionality in their approaches, avoiding excessive data collection and intrusive identity verification processes.
The EDPB also addressed data protection concerns in sports, providing recommendations on the 2027 WADA Code. As anti-doping efforts rely heavily on biometric and health data, the Board stressed that national anti-doping organizations should comply with GDPR standards when handling athletes’ sensitive personal information.
The recommendations call for greater transparency, a clearly defined legal basis for data processing, and robust mechanisms to ensure athletes can exercise their data protection rights. Given the global nature of sports governance, the EDPB urged WADA to align its data protection policies with European standards.
The adopted recommendations and principles will soon be published on the EDPB’s website, providing further guidance for businesses and regulators navigating the evolving AI and data protection landscape.
Need Help?
If you have questions or concerns about any global guidelines, regulations and laws, don’t hesitate to reach out to BABL AI. Their Audit Experts can offer valuable insight, and ensure you’re informed and compliant.
