CLVPartners

regulation

Current Activities of the European Data Protection Board to Support GDPR Compliance

Reading time: 7 minutes

The European Data Protection Board has published its Work Programme for 2026–2027 (hereinafter: the “Programme”), adopted on 11 February 2026, The Programme provides not only strategic directions but also concrete tools to support organisations’ day-to-day compliance. This article summarises the consultation results and the key plans set out in the European Data Protection Board’s Programme.

Background

In its 2024–2027 strategy, the European Data Protection Board identified four interlinked priorities. These include strengthening the consistent application of data protection rules and further priority is deepening supporting organisations in complying with the law. A cooperation among data protection authorities, particularly in cross-border cases. The strategy also emphasises ensuring that data protection is effective in a fast-evolving digital environment affecting multiple regulatory areas, including applications of artificial intelligence. Moreover, the European Data Protection Board aims to actively foster and shape international dialogue on privacy and personal data protection. The Programme supports the implementation of the European Data Protection Board’s 2024–2027 strategy, based on the identified priorities and the most important needs of stakeholders.

Main elements of the programme

The Programme builds on the consistent application of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and sets out the European Data Protection Board’s activities for 2026–2027 along four pillars: harmonisation and compliance, a common culture of enforcement, challenges in the digital regulatory environment, and global data protection dialogue.

Harmonisation and legal clarity

The European Data Protection Board will continue to issue detailed yet accessible guidance on topics considered critical by stakeholders during events and consultations, such as anonymisation and pseudonymisation, data processing based on legitimate interests, “consent or pay” models, and targeted updates on guidance for data protection officers.

The European Data Protection Board also intends to facilitate GDPR compliance with new practical tools, particularly for small and medium-sized enterprises (SMEs), including templates and guidance. To this end, a public consultation was conducted between 5 November and 3 December 2025 to identify which practical templates would most effectively support GDPR compliance.

The consultation highlighted the greatest demand for templates on records of processing activities, data protection impact assessments, legitimate interest assessments, privacy notices, transfer impact assessments, data processing agreements, data breach notification forms, and risk assessment templates. The European Data Protection Board has prioritised three templates in the Programme—legitimate interest assessment, records of processing activities, and privacy notices—to provide consistent, practical support, especially for organisations with limited resources.

In addition, the European Data Protection Board supports controllers and processors in developing and implementing compliance measures, for instance, through opinions on certification schemes, codes of conduct, and accreditation.

Stronger enforcement culture and cooperation

The second pillar aims to ensure consistency in the application and enforcement of the GDPR and to enhance cooperation among its members. The European Data Protection Board will continue to support the development of cooperation and enforcement tools and promote the sharing of expertise. Efforts will also focus on giving greater attention to priority issues and creating consistency.

In line with these objectives, the European Data Protection Board will focus on the consistent application of the GDPR and effective cooperation between authorities. To this end, it will update, among other things, its guidelines on handling cross-border cases, its principles on imposing fines, and its rules on mutual assistance and emergency procedures. As part of its action on the Coordinated Enforcement Framework (CEF), in 2026 it will focus on fulfilling the obligations under Articles 12-14 of the GDPR regarding transparent information, communication and measures for the exercise of data subjects’ rights. Where necessary, it will set up working groups to provide operational platforms for cases requiring cooperation on enforcement matters. To ensure the effective functioning of the consistency mechanism, it will adopt opinions addressed to national supervisory authorities with a view to supporting consistent decision-making.

Data protection at the intersection of digital legislation

The European Data Protection Board’s priority is to ensure coherence across EU digital legislation. In the rapidly evolving technological and market environment, data protection interacts closely with multiple other EU laws, such as the AI Regulation. This increases the importance of consistent interpretation, coordinated action by authorities, and clear guidance. The European Data Protection Board collaborates with other regulators, including competition and consumer protection authorities, to support the new cross-regulatory environment. Key technological topics include generative AI, telemetry and diagnostic data, and blockchain-related data protection issues.

Global data protection dialogue and data transfers

The European Data Protection Board continues to promote global dialogue on privacy and data protection, focusing on international cooperation between its members and third-country authorities, especially those with EU adequacy decisions.

Conclusion: more support, greater legal certainty

A key message of the Programme is that GDPR compliance is not merely a matter of regulatory oversight, but a process that can be actively supported and structured. Templates, harmonised guidance, and enhanced authority cooperation aim to make GDPR application more predictable and practical. At the same time, each organisation must tailor its data processing documents and procedures to its own business processes and risks. The European Data Protection Board seeks to strengthen fundamental rights, support organisational compliance, and ensure that European data protection remains coherent and competitive in a fast-changing digital environment.

Photo source: pexels.com, MART PRODUCTION

Current Activities of the European Data Protection Board to Support GDPR Compliance Read More »

New developments in the regulation of energy cooperatives

Reading time: 6 minutes

The Hungarian Act X of 2006 on Cooperatives (“Cooperatives Act”) has been amended with effect from 1 January 2026 with provisions governing energy cooperatives (“Amendment”). The purpose of this article is to briefly present the background to the Amendment, introduce the concept and key characteristics of energy cooperatives as a new legal institution, and provide an overview of the most important rules applicable to energy cooperatives.

The background of the Amendment

Legal basis and purpose of energy communities

In order to mitigate the adverse effects of climate change and promote the achievement of climate neutrality, the European Union adopted in 2019 the Directive (EU) 2019/944 on common rules for the internal market for electricity and amending Directive 2012/27/EU. This Directive introduced the legal framework for citizen energy communities within the EU.

An energy community is a voluntary association of energy producers and energy consumers. Its operation is based on open and voluntary participation, and it is governed by its members or shareholders, who may be natural persons, small enterprises, or local authorities.

Under EU regulation, energy communities may be established in various legal forms. For example, they may operate as associations, cooperatives, or non-profit companies.

The primary purpose of an energy community is not to generate financial profit, but to provide environmental, economic, and social benefits to its members, shareholders, or the area in which it operates. These benefits may be achieved, inter alia, through the generation, distribution, supply and consumption of energy, as well as through aggregation, energy storage and the provision of services aimed at improving energy efficiency. The activities of an energy community may also extend to solutions related to electric vehicle charging and to the provision of other energy-related services to its members or shareholders.

Energy community operations in practice

It is a legitimate question how an energy community operates in practice and how it can provide tangible benefits to its members.

An energy community can best be understood as a small-scale system that is partially or fully energy self-sufficient. Within the community, members with different roles cooperate with each other. Some are solely energy generators, others both generate and consume energy, while some participate exclusively as consumers. Energy producers may include, for example, households with their own solar panel systems, as well as biogas plants or even wind turbines. These production units are typically developed through community funding from the shared budget of the energy community.

Energy storage solutions form an integral part of the system, enabling the storage of energy that has been produced but not immediately consumed. The key to operation is the continuous interaction between generation, storage and consumption units. This is ensured by an intelligent management system, the so-called smart grid, which monitors production and consumption and directs energy to where it is needed at any given time.

Ideally, an energy community produces slightly more energy than its members consume, which may allow it to become fully independent from the public grid. However, if the balance between production and consumption cannot be maintained—meaning the community produces either too much or too little energy—the energy community may trade with the universal service provider to balance its energy needs.

In conclusion, it can be stated that by promoting energy communities, the European Union seeks to achieve interconnected short- and long-term objectives. In the short term, energy communities can contribute to alleviating energy poverty and strengthening local communities. In the long term, the EU aims to increase the share of renewable energy sources, establish a decentralized and sustainable energy system, and achieve its climate neutrality target set for 2050.

Regulation of energy communities in Hungary and practical experience

To fulfil its legislative obligations arising from EU law, Hungary established the legal framework for the operation of domestic energy communities through the amendment adopted in 2020 to Act LXXXVI of 2007 on electricity (“Electricity Act”).

According to the Electricity Act., an energy community is a legal entity operating in the form of an association, cooperative or non-profit company, whose purpose is to create environmental, economic and social benefits for its members or for the area of operation defined in its statutes. This purpose may be achieved, inter alia, through the generation, distribution, supply and consumption of energy—including the use of renewable energy sources—as well as through aggregation, energy storage and the provision of services aimed at improving energy efficiency.

In connection with energy communities, it should be noted that registration with the Hungarian Energy and Public Utility Regulatory Authority (MEKH) is a prerequisite for acquiring legal status. In addition, to conduct licensed activities—such as electricity generation, energy trading, aggregation or energy sharing—an energy community must obtain the relevant regulatory permits in the same way as any other market participant. According to the MEKH register, there are currently 17 registered energy communities in Hungary.

Rules applicable to energy cooperatives under the Cooperatives Act

It can be concluded that the concept of energy cooperatives has been present in the Hungarian legal system for several years as one of the possible legal forms of energy communities. Although the Electricity Act allows for the establishment of energy cooperatives, detailed and specific regulation had so far been lacking. This regulatory gap was addressed by the Amendment, as a result of which the Cooperatives Act has been supplemented with a separate chapter dedicated to energy cooperatives.

Cooperatives are legal entities established through the members’ capital contributions, with the objective of lending assistance to its members to satisfy their economic and societal needs. The primary obligations of members consist of making their capital contributions and providing the personal involvement specified in the articles of association. The general rules applicable to cooperatives are set out in Act V of 2013 on the Civil Code and in the general provisions of the Cooperatives Act. It is important to note that these general rules also apply to energy cooperatives, in accordance with the specific provisions applicable to them.

Under the Cooperatives Act, an energy cooperative is one form of energy community within the meaning of the Electricity Act, operating within a cooperative structure and conducting energy-related activities in the interest of its members. Its primary purpose is to improve the economic and social situation of its members, while also providing environmental, community and educational benefits, thereby serving the public interest.

Any natural or legal person who meets the statutory requirements may participate in the establishment and subsequent operation of an energy cooperative. At the same time, the regulation allows the energy cooperative to make membership subject to geographical or technical conditions as set out in its articles of association.

Due to the specific purpose and operation of energy cooperatives, members may contribute different amounts to the cooperative’s assets, but this does not affect the equality of membership rights. In decision-making, each member participates with equal weight, meaning that each member has one vote. The Cooperatives Act also allows for the admission of members who are not required to provide personal participation but support the operation solely through capital contributions; such members are referred by the law as investor members.

The operation of an energy cooperative must be conducted in a manner that is consistent with the interests of its members and is both efficient and sustainable. To ensure this, the Cooperatives Act provides that matters affecting the articles of association fall within the general meeting, thereby guaranteeing the cooperative’s autonomy. The legislation regulates in detail the procedure for transferring cooperative and investor shares and the related notification obligation and grants pre-emptive rights to members and the cooperative itself.

A key rule concerning the fiscal management of energy cooperatives is that the legislation requires the creation of mandatory reserves. In this context, the energy cooperative must establish a reserve fund amounting to 10% of the profit generated. The purpose of the reserve fund is to ensure the long-term financial sustainability of the energy cooperative. The regulation also requires the establishment of an education and information fund, which serves as the financial basis for the continuous training and knowledge-sharing of members. At least 2% of the profit from the previous fiscal year must be allocated to this fund.

Summary

Overall, it can be concluded that the amendment to the Cooperatives Act, in line with EU objectives, establishes the legal framework for the operation of energy communities in cooperative form. As non-profit organisations, energy cooperatives may participate in the energy market while promoting community, environmental and economic interests, thereby contributing to sustainability, energy efficiency and environmental protection. The regulation prioritises democratic decision-making, transparent operation and the protection of members’ interests, while also allowing for the involvement of external investors.

Photo source: pexels.com, Centre for Ageing Better

New developments in the regulation of energy cooperatives Read More »

The new EU General Data Protection Regulation has been approved

After long years of negotiations, on 14 April 2016 the EU Parliament approved the general data protection regulation (“Regulation”), which – compared to the current rules – means changes both for private persons and companies.

The Regulation shall replace the current EU Directive, being implemented by the member states in certain cases quite different ways, and a new, consolidated regime shall be directly implemented by the member states.

The Regulation will enter into force after two years from its approval, however, due to the significant changes included therein, it is advisable for companies to start reviewing their internal rules and prepare for their potential amendments. The infringement of the new rules may be subject to a fine of up to 20.000.000 EUR, or in case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year (whichever is higher).

Should you have any questions regarding the above, please feel free to contact us.
Dr. Marianna Csabai
H-1126 Budapest, Tartsay Vilmos u. 3.
Tel: + 36 1 488 7008
Fax: + 36 1 488 7009
E-mail:

 

The new EU General Data Protection Regulation has been approved Read More »

CLVPartners
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.