The processing of personal data has long ceased to be a national issue. In a world where data crosses borders daily, regulators are working together more closely than ever. The Autoriteit Persoonsgegevens (AP) plays an active role in this regard within the European Union (EU), where cooperation and coordination are essential to ensure the protection of personal data. That cooperation takes place within established structures such as the European Data Protection Board (EDPB) and in committees that oversee data exchange within police, justice and border control.

European Data Protection Board

The European Data Protection Board (EDPB) is the independent European body that oversees the consistent application of the AVG across the EU. The EDPB consists of representatives from all national privacy regulators as well as the European Data Protection Supervisor (EDPS). The committee develops guidelines, decisions and recommendations that help place new technological developments - such as AI, biometrics and data algorithms - within the framework of the AVG. In doing so, the EDPB supports both regulators and organizations in correctly interpreting privacy legislation and promoting a common European level of data protection.

One-stop mechanism

Digitalization means that organizations increasingly operate in multiple member states. For cross-border data processing, the AP therefore coordinates its supervisory work with other European colleagues through the one-stop-shop mechanism (or one-stop-shop). This prevents companies from having to deal with multiple regulators at the same time. The lead regulator - usually from the country where the organization has its European headquarters - coordinates investigations with relevant regulators so that decisions are reached uniformly and transparently. This mechanism strengthens the predictability and consistency of supervision within the Union.

Europol and Eurojust

In addition to civilian data processing, data exchanges within the criminal justice chain are playing an increasingly important role. The AP represents the Netherlands in the coordinated supervision of Europol and Eurojust, where personal data are processed to support cooperation on counterterrorism, human trafficking, cybercrime and other cross-border crimes. These oversight structures are crucial to monitor the balance between

security and privacy, and to ensure that the police and judiciary use personal data only within strict legal frameworks.

European information systems

The AP also plays a supervisory role in the management of large-scale European information systems. Within the so-called coordinated supervision framework it monitors the lawful processing of personal data within systems such as:

• Schengen Information System II (SIS II): alerts on wanted or missing persons and stolen objects;

• Eurodac: fingerprints of asylum seekers;

• Visa Information System (VIS): data on visa applications;

• Customs Information System (CIS): data on supervision and enforcement of customs regulations.

This cooperation at the European level ensures that European citizens can be confident that their personal data will continue to be subject to the same level of protection, even when exchanged internationally. In doing so, the AP contributes directly to a strong, uniform and future-proof system of data protection within the EU.