EDPB: final report on the public consultation to simplify GDPR compliance published. Three EU “ready-to-use” templates forthcoming.

The EDPB has published its report on the outcome of the public consultation concerning templates that may facilitate GDPR compliance. The initiative was launched in the wake of the Helsinki Statement, with the aim of increasing clarity and providing practical support to organisations, with particular attention to SMEs.

A total of 82 submissions were received from a broad range of stakeholders (trade associations, companies, DPOs, lawyers, public authorities, NGOs, academia and individuals). The vast majority of contributions came from EU/EEA countries (71), with 11 submissions from third countries.

Among the templates most frequently requested by stakeholders were, in particular: records of processing activities (RoPA), data protection impact assessments (DPIAs), legitimate interest assessments, privacy notices, transfer impact assessments, controller–processor agreements, and personal data breach notification forms.

Taking that feedback into account, and with a view to harmonising what is already available at national level, the EDPB has decided to include in its 2026–2027 work programme the development of three EU-wide templates: (i) a template or flowchart for legitimate interest assessments, (ii) a template for records of processing activities, and (iii) a template for a privacy notice/privacy policy.