As part of a larger package to improve the EU's response to the evolving criminal landscape, the Commission presented a proposal to update Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the EU institutions, bodies, offices and agencies (EUDPR). Presented on 24 June 2026, the initiative aims to align the relevant data protection rules for the EU agencies and bodies operating in the area of justice and home affairs (JHA), such as Europol, Eurojust, the European Public Prosecutor's Office (EPPO), and Frontex. The current data protection framework of these agencies and bodies is fragmented or has gaps, leading to legislative uncertainties.

The reform will mainly target Chapter IX of the EUDPR which applies to "the processing of operational personal data" by the JHA Union bodies, offices and agencies when carrying out activities within the framework of the Areas of Freedom, Security and Justice in the TFEU. Against this background, the EUDPR would be amended as follows:

• Extension of the scope of Chapter IX to ensure it applies consistently across all EU agencies, bodies and offices in the criminal justice and law enforcement sector. The EPPO will be integrated into the EUDPR framework, while keeping the specific data protection rules in the EPPO Regulation, insofar as they are necessary to reflect the unique nature of the EPPO as the independent public prosecutor's office of the Union.
• Inclusion of new rules on the role of Data Protection Officers (DPOs), the maintenance of records of processing activities, the collaboration between supervisory authorities, and the international transfer of operational personal data.
• Consistent rules on the powers of the European Data Protection Supervisor (EDPS), adapted to the context of processing operational data. Consequently, the agency-specific provisions on the EDPS' tasks and powers in the founding acts of the JHA agencies and bodies will be removed. The proposal follows the model for the EDPS' powers set out in the 2022 Europol reform.

Finally, the proposal aims to generally streamline the data protection provisions by eliminating redundancies, duplications and inconsistencies in the area of the JHA Union bodies, offices and agencies. It also aligns the provisions on processing of operational data with the Digital Omnibus proposal.

The proposal to update the EUDPR comes together with proposals for revisions of the Europol and Eurojust Regulations and the Directive regarding the European Investigation Order (→related links and separate news items).