Council Working Party Discusses Single-Entry Point for GDPR & Cybersecurity Notifications
Dposphere
The Council of the European Union convened a Working Party on Data Protection meeting on 19 February 2025 to examine proposals for a single-entry point (SEP) for notifications under both the GDPR and EU cybersecurity legislation, including NIS2. The SEP concept aims to streamline incident notifications so that organisations can report breaches or cyber incidents once, through an EU-level portal, rather than separately to multiple authorities. ENISA representatives attended and contributed expertise on how the unified system could align with technical and regulatory needs.
Such integration could alleviate reporting burden and improve cross-directive coordination, particularly in complex cases where a cybersecurity incident also constitutes a GDPR breach.
🔗 Council Working Party agenda — Council of the EU official document data.consilium.europa.eu
Dposphere
Recent Post
The UK’s Information Commissioner’s Office has reprimanded ACRO, the Criminal Records Office, following cybersecurity failures involving
The European cybersecurity certification ecosystem is continuing to develop as organizations face growing pressure to demonstrate
The European Union Agency for Cybersecurity (ENISA) announced that it is expanding its role within the
