EDPB - Binding Decision 1/2026
EDPB binding decision finds no abuse of rights in standardized data protection complaints.
The European Data Protection Board (EDPB) issued a binding decision clarifying that a standardized approach to lodging data protection complaints does not inherently constitute an abuse of rights. The decision instructs the Belgian Data Protection Authority (APD) to assess a complaint filed by noyb against Vlaamse Radio- en Televisieomroeporganisatie (VRT) on its merits, rejecting the APD's initial proposal to dismiss it based on alleged abuse.
AI summary of the linked source. Not reviewed by an editor. How this works
Run EDPB?
Get an email when a new story names EDPB, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Belgian Data Protection Authority (APD) attempted to dismiss a data protection complaint filed by noyb against VRT by characterizing standardized complaint submissions as an abuse of rights, rather than assessing the complaint on its merits. The EDPB's binding decision clarifies that procedural standardization alone does not invalidate a complaint, forcing the APD to conduct a substantive review. This matters because supervisory authorities cannot use procedural technicalities as a shield against legitimate enforcement, undermining the effectiveness of GDPR rights. Organizations and regulators alike must recognize that citizens' rights to lodge complaints are foundational to GDPR accountability, and attempts to circumvent this erode public trust in data protection frameworks.