Council Working Party Discusses Single-Entry Point for GDPR & Cybersecurity Notifications

The Council of the European Union convened a Working Party on Data Protection meeting on 19 February 2025 to examine proposals for a single-entry point (SEP) for notifications under both the GDPR and EU cybersecurity legislation, including NIS2. The SEP concept aims to streamline incident notifications so that organisations can report breaches or cyber incidents once, through an EU-level portal, rather than separately to multiple authorities. ENISA representatives attended and contributed expertise on how the unified system could align with technical and regulatory needs.
Such integration could alleviate reporting burden and improve cross-directive coordination, particularly in complex cases where a cybersecurity incident also constitutes a GDPR breach.
🔗 Council Working Party agenda — Council of the EU official document data.consilium.europa.eu