The EDPS 20th Anniversary Book reflects on the richness of the past 20 years of personal data protection to prepare for and embrace the years ahead of us. This panel will focus mainly on the question of “What’s next?”, as recent legislative developments are set to bring challenges and opportunities for protecting individuals’ rights and freedoms. 

For example, the Digital Markets Act and Digital Services Act introduce new rules applicable to certain online services, while the AI Act aims to curb risks for fundamental rights resulting from the use of AI systems. In parallel, the Commission’s proposal to improve the functioning of the GDPR’s ‘One-Stop-Shop’ mechanism is situated within a broader debate on how to organise effective enforcement in the digital world.

This panel will discuss the challenges and opportunities ahead by reflecting on three themes:

1. Will the new rules lead to better protection, or is there a risk of unintended consequences?
2. Will the accompanying governance frameworks drive coherence or fragmentation?
3. What lessons can we draw from the past to promote effective protection in the future?