Article 68 of the GDPR provides for the establishment of the European Data Protection Board (EDPB), to replace the EU Article 29 Working Party (Recital 139, GDPR). The EDPB is to act independently in the performance of its tasks and in the exercise of its powers (Article 69, GDPR).

The EDPB is a body of the EU made up of the heads of the supervisory authority of each member state and the European Data Protection Supervisor responsible for ensuring the consistent application of data protection law. The tasks of the board are set out in Article 70 of the GDPR.

For further information, see Practice note, Overview of EU General Data Protection Regulation: Nature and scope of the EU data protection regime: History and background and Practice note, Enforcement, Sanctions, and Remedies under the GDPR: Role of the European Data Protection Board.