XpertDPO submission for Implementation Dialogue on the application of the General Data Protection Regulation

A practical analysis of the EDPB’s 2025 Annual Report, exploring what its guidance, enforcement priorities and cross-regulatory work mean for organisations, governance, AI oversight and privacy compliance in practice.

A practical guide for DPOs and compliance teams on using DPIAs to structure AI governance, manage risk, and build defensible, scalable processes aligned with GDPR and the EU AI Act.

AI DPIAs rarely fail because they are missing. They fail where ownership, outputs, and decision influence are not fully understood, leaving organisations unable to explain how the system actually operates in practice.