Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

Stakeholder event on guidelines on the interplay between data protection and competition law by 15 September 2026

15 September 2026

By 15 September 2026, stakeholders with expertise in data protection and competition law must express their interest to participate in an event discussing upcoming guidelines. This engagement is crucial for shaping the final instrument on the interplay between these two regulatory fields. Organisations should prepare to contribute their insights to this important discussion.

This deadline requires organisations to proactively engage with the regulatory process, ensuring their perspectives on the intersection of data protection and competition are heard. Data protection officers and privacy counsel should identify relevant internal experts and prepare a submission outlining their interest and potential contributions. The work involves analysing the implications of such guidelines for their specific business models and operational practices, particularly concerning data sharing, market dominance, and consumer protection.

Organisations must demonstrate a clear understanding of how competition principles might influence data processing activities and vice versa. This includes considering how data access, portability, and interoperability requirements could be shaped by competition law, impacting controller and processor obligations. Evidence of preparedness would include internal consultations, policy reviews, and a clear rationale for participation, all of which an authority would expect to see.

Effective participation requires a strategic approach to advocacy, focusing on specific articles or principles within existing data protection frameworks, such as the General Data Protection Regulation, that could be affected. This proactive engagement aims to ensure the resulting guidelines are practical and proportionate for all market participants.

Upcoming guidelines on the interplay between competition and data protection sets 15 September 2026 as the point of effect, and the preparation it requires sits with teams who are measured on other work, which is why this date slips rather than the obligation being misread.

Upcoming guidelines on the interplay between competition and data protection

Who this binds
Stakeholders with relevant expertise in data protection and competition law
What changed
What is fixed is the date: 15 September 2026, when remote stakeholder event to inform and support ongoing work on guidelines
What to check
Express interest to participate in the event
What this does not mean
This is a date in the diary, not a new obligation published today. Nothing in force changed this morning.

Send this to your team

Stakeholders with expertise in data protection and competition law should express interest by 15 September 2026 to participate in an event discussing upcoming guidelines on the interplay between these two fields.

Today's question

A company is implementing a blockchain solution to manage supply chain logistics, which involves recording personal data of employees and partners. According to EDPB guidelines, what is the primary consideration for determining the roles (controller, joint controller, processor) of participants in this blockchain network?

  1. The geographical location of the participants.
  2. The amount of data each participant processes.
  3. Their influence over the processing purposes and means.
  4. The type of blockchain technology used (public or private).

Answer this question on the site

Worth knowing

  1. Federal Register extends comment period for AV Framework Updates and Interim Guidance

    Organisations involved in automated vehicle development or deployment should leverage this extended comment period to influence future regulatory frameworks that will impact data collection and privacy in AVs.

  2. IAPP discusses AI governance beyond compliance, focusing on human agency

    The IAPP opinion piece signals a market shift towards AI governance frameworks that prioritise human agency and autonomy over mere regulatory compliance.

  3. Researcher shows how Claude Code can be tricked simply by asking it to summarise a website

    This finding signals that AI governance strategies must account for prompt engineering vulnerabilities in large language models like Claude Code, which could be exploited to bypass security measures.

  4. Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

    This large scale phishing campaign, detected by INKY, highlights the evolving sophistication of cyber threats that target employee personal data through novel attachment types like SVG files.

  5. Azul Vision Settles HIPAA Right of Access Case for $50,000

    This settlement by Azul Vision serves as a clear signal from the Department of Health and Human Services that healthcare providers must diligently uphold individuals' HIPAA right of access to their personal health information.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.