This guidance document outlines how the GDPR applies in the context of the Digital Services Act (DSA), clarifying overlaps and interactions between the two laws. It explains which DSA provisions involve personal data processing, how key GDPR concepts (e.g. profiling, special‑category data, transparency of advertising) apply under the DSA, and offers practical advice for how authorities and online intermediaries should cooperate. The guidelines also address enforcement coordination between DSA competent authorities and data protection authorities to ensure consistent protection of individuals’ fundamental rights.
Author: European Data Protection Board (EDPB)
Status: Draft
Adoption date: 2025‑09‑12
Last updated: 14 Sept 2025
Category: Guidance
Subcategory: Official guidance