European Parliament and Committee on Civil Liberties, Justice and Home Affairs 25 March 2021, European Parliament resolution of 25 March 2021 on the Commission evaluation report on the implementation of the General Data Protection Regulation two years after its application (2020/2717(RSP))

Also known as

The European Parliament, in its resolution of 25 March 2021 (P9_TA(2021)0111), assessed the two-year implementation of Regulation (EU) 2016/679 (GDPR), concluding that the regulation has been an overall success and that legislative revision is not presently warranted. The resolution identifies critical enforcement deficiencies—including under-resourced national data protection authorities (DPAs), inconsistent application of the one-stop-shop mechanism, uneven cross-border cooperation under Articles 60 and 63, and inadequate fines lacking deterrent effect—and calls on the Commission to initiate infringement procedures against Member States failing to comply with Article 52(4) obligations to adequately fund their DPAs. The Parliament further urges harmonisation of penalties and guidance by the European Data Protection Board (EDPB), stricter enforcement against large digital platforms, and full GDPR compliance in forthcoming Union legislative initiatives including the Data Governance Act, Digital Services Act, and proposed ePrivacy Regulation.AI