IAB Europe views the draft GDPR procedural regulation as a positive initial step towards establishing a more straightforward and streamline enforcement mechanism and suggests the following key recommendations:

• Preserving the one-stop-shop system: Maintaining the one-stop-shop system as the basis of GDPR governance, balancing national and European competences.
• Encouraging early resolutions: Resolving cases through early resolution methods, such as amicable settlements, and facilitating the use of other resolution mechanisms, such as internal complaint systems.
• Enhancing transparency: Increasing transparency in the decisions of the supervisory authorities, including correspondence between the supervisory authorities in the administrative file.
• Strengthening defendants’ rights: Strengthening defendants' rights to be heard not only at key stages of the administrative procedures but also at other critical stages to ensure that defendants have reasonable and proportionate time limits for their input.

IAB Europe anticipates that these recommendations will improve the effectiveness of GDPR enforcement while maintaining fundamental rights and fairness.

IAB Europe's CEO, Townsend Feehan, emphasised the commitment to respecting privacy, efficient GDPR enforcement, and to collaborating with stakeholders to improve the industry's future.

IAB Europe’s policy paper can be found here.

IAB Europe’s press release can be found here.

Our blog post on EDPB’s draft enforcement regulation can be accessed here.