%20(A2%20(Landscape))%20(9).png)
EU Level
GDPR
Right to erasure enforcement report
The EDPB published a coordinated enforcement report showing persistent implementation problems with the “right to be forgotten”, one of the most exercised GDPR rights.
EDPB published an outcomes report from its stakeholder event on anonymisation and pseudonymisation, capturing practical GDPR implementation issues around “anonymous vs pseudonymous” data handling.
EDPB’s coordinated enforcement report on the right to erasure (Art. 17 GDPR) flags recurring operational gaps (e.g., weak internal request-handling procedures, inconsistent deletion/anonymisation approaches, and deletion in back-ups) and confirms the next coordinated action will focus on GDPR transparency/information duties.
DSA
European Commission marked two years of the DSA by reporting that platforms reversed nearly 50 million content/account moderation decisions via DSA-linked user challenge mechanisms, highlighting the DSA’s practical impact on user redress.
The Commission opened formal DSA proceedings against SHEIN focusing on
(i) illegal goods risk controls (including CSAM-related risks),
(ii) potentially addictive design/reward features, and
(iii) recommender-system transparency (including a non-profiling option).
Sweden-level
GDPR
Integritetsskyddsmyndigheten (IMY) summarised EDPB’s EU-wide right-to-erasure findings for Swedish stakeholders, highlighting recurring weaknesses (internal routines, information to individuals, anonymising instead of deleting, and deletion in back-ups) and pointing towards coordinated EU-level guidance.
IMY published a final report on its 2018–2025 role as camera-permit authority, noting most permit applications concerned schools/preschools and that a high share were approved; it also explains the post–1 April 2025 shift to self-assessment and documentation by operators.
