European Data Protection Board publishes guidelines on the interaction of European rules on digital and data protection law

The European Data Protection Board has published guidelines on the interaction of the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) on 12 September 2025.

The guidelines clarify how the DSA and the GDPR interact when intermediary services such as marketplaces, social networks, content sharing platforms, app stores and online platforms for travel and accommodation process personal data. The guidelines recognise that efforts to detect, identify, and address (e.g., de-monetise, remove or disable access to) illegal content may involve processing of personal data using different techniques. Moreover, the guidelines explain which parts of the DSA affect GDPR regulations and how certain provisions of the DSA relate to GDPR regulations such as profiling and special categories of data.

The guidelines also explain how the competent authorities should interpret and apply both regulations in a harmonised manner and provide practical guidance for supervisory authorities to coordinate the enforcement of the DSA and the GDPR in areas where their obligations overlap. This serves to ensure consistency, legal certainty for data controllers and the protection of rights and freedoms.

Should you have any questions on the interaction of the DSA with the GDPR or require further information, please do not hesitate to contact us any time.