European Data Protection Supervisor (EDPS)

The European Data Protection Supervisor (EDPS) was established by Regulation (EU) 2018/1725 (the EUDPR) to oversee data protection within the EU institutions themselves — the Commission, Parliament, Council, agencies such as Europol, Eurojust and Frontex, and the operational databases they run. The EDPS has supervisory, advisory and investigative powers that mirror a national DPA's role under GDPR, but scoped to the institutions rather than private actors.

In practice the EDPS matters to private organisations in three ways. It sits on the European Data Protection Board and contributes to EDPB guidelines that shape GDPR interpretation. It audits large-scale EU information systems (the Schengen Information System, the Visa Information System, SIS II) whose data flows touch private processors. And it is the regulator for processing commissioned by EU institutions — if your organisation processes personal data under a Commission contract, the EDPS supervises that engagement.