EDPB Publishes Agenda for Stakeholder Event on Political Advertising and Data Protection

The European Data Protection Board (EDPB) has published the agenda for its upcoming stakeholder event focused on political advertising and data protection, signaling growing regulatory attention to how personal data is used in electoral campaigns across the European Union.

The event, scheduled to take place in the coming months, will bring together data protection authorities, political parties, advertising technology companies, civil society organizations, and academic experts to discuss the complex intersection of political campaigning and privacy rights under the General Data Protection Regulation (GDPR).

Key Topics on the Agenda

The EDPB's published agenda reveals several critical areas of focus for the discussions:

Data Processing in Political Campaigns The event will examine how political parties and campaign organizations collect, process, and utilize personal data for targeting voters. This includes analysis of consent mechanisms, legitimate interest claims, and the transparency requirements for data processing in political contexts.

Microtargeting and Profiling Concerns Special attention will be given to the practice of microtargeting voters based on their personal characteristics, online behavior, and inferred political preferences. The discussions will explore whether current GDPR provisions adequately address the unique challenges posed by sophisticated voter profiling techniques.

Cross-border Data Flows With European elections involving multiple member states, the agenda includes sessions on managing cross-border data transfers and ensuring consistent application of data protection rules across jurisdictions during pan-European campaigns.

Platform Responsibility The role of social media platforms and advertising technology providers in facilitating political advertising will be scrutinized, particularly regarding their obligations to ensure compliance with data protection laws when hosting political content.

Regulatory Context

The timing of this stakeholder event reflects increasing regulatory scrutiny of political advertising practices following several high-profile controversies involving data misuse in electoral contexts. The EDPB has been working to provide clearer guidance to both data controllers (political organizations) and data subjects (voters) on their respective rights and obligations.

Under GDPR, political parties and campaign organizations are considered data controllers and must comply with the same fundamental principles that apply to commercial entities. This includes obtaining valid legal bases for processing personal data, providing transparent information about data use, and implementing appropriate security measures.

However, the unique nature of political speech and the public interest in democratic processes has created some ambiguity around how these rules should be applied in practice. The stakeholder event aims to address these tensions and develop more concrete guidance.

Implications for Political Organizations

The outcomes of this event could have significant implications for how political campaigns operate across Europe. Organizations involved in electoral activities may need to review and potentially revise their data processing practices, particularly regarding:

• Consent mechanisms for data collection and processing
• Transparency in targeted advertising
• Data retention policies for voter information
• International data sharing arrangements
• Third-party vendor relationships

Looking Ahead

The EDPB's initiative represents a proactive approach to addressing emerging privacy challenges in the political sphere before they escalate into major compliance issues or public controversies. By engaging stakeholders early, the board aims to foster a more harmonized understanding of data protection requirements across member states.

The event's findings and any subsequent guidance will likely influence not only European political campaigns but also serve as a reference point for other jurisdictions grappling with similar issues around political advertising and personal data protection.

Stakeholders interested in participating or following the event's outcomes should monitor the EDPB's official channels for updates on registration and documentation availability.