On February 12, 2025, during its February 2025 plenary meeting, the European Data Protection Board (EDPB) adopted a statement on assurance, which outlines ten principles concerning the processing of personal data when determining an individual's age or age range. The EDPB is also cooperating with the European Commission on age verification in the context of the Digital Services Act (DSA) working group.
In addition, the EDPB extended the scope of the ChatGPT task force to artificial intelligence (AI) enforcement. The EDPB members underlined the need to coordinate the actions of the Data Protection Authorities (DPAs) regarding urgent sensitive matters and will set up a quick response team for that purpose.
In the statement, the EDPB outlines ten key principles to follow to implement a governance framework that complies with the General Data Protection Regulation (GDPR) to protect children and how their personal data is processed. The EDPB Chair, Anu Talus, stressed the importance of balancing the responsible use of AI within the GDPR framework. Businesses should ensure compliance with these evolving data protection standards, and our team is available to provide guidance on navigating the GDPR requirements and implementing effective compliance strategies.