The Council of the European Union convened a Working Party on Data Protection meeting on 19 February 2025 to examine proposals for a single-entry point (SEP) for notifications under both the GDPR and EU cybersecurity legislation, including NIS2. The SEP concept aims to streamline incident notifications so that organisations can report breaches or cyber incidents once, through an EU-level portal, rather than separately to multiple authorities. ENISA representatives attended and contributed expertise on how the unified system could align with technical and regulatory needs.
Such integration could alleviate reporting burden and improve cross-directive coordination, particularly in complex cases where a cybersecurity incident also constitutes a GDPR breach.
🔗 Council Working Party agenda — Council of the EU official document data.consilium.europa.eu
U.S. States Coordinate Privacy Enforcement Around Global Privacy Control
Privacy regulators from several U.S. states are increasing cooperation to enforce consumer privacy rights, particularly concerning Global Privacy Control (GPC)
JURCOM GRC
July 28, 2026
5:46 pm