The Council of the European Union published a cover note on 1 December 2026 containing the European Data Protection Supervisor's (EDPS) opinion on proposed amendments to the Pan-European Personal Pension Product (PEPP) Regulation. The opinion addresses data protection aspects of the legislative proposal to amend Regulation (EU) 2019/1238, focusing on ensuring that PEPP data processing complies with fundamental privacy rights and the General Data Protection Regulation (GDPR). This marks a procedural step in the legislative process, with the EDPS providing recommendations to safeguard personal data within the pension product framework.
Document metadata The document, issued under the Polish Presidency, is a formal opinion from the EDPS submitted to the Council. It is non-binding but carries significant weight as an expert assessment from the EU's independent data protection authority. The opinion likely includes recommendations on data minimization, purpose limitation, and transparency obligations for PEPP providers, as well as potential safeguards for cross-border data transfers. The amendments aim to balance the development of a competitive personal pension market with robust data protection standards.
Policy orientations and trade-offs The EDPS opinion introduces a data protection lens into the PEPP revision, potentially tightening requirements for pension providers. This creates a trade-off between consumer privacy and business competitiveness: stricter data rules may increase compliance costs for financial institutions, potentially reducing the attractiveness of offering PEPPs, but they also enhance consumer trust and protection. The opinion may also address the tension between innovation in digital pension services and the need to limit data collection to what is strictly necessary.
Impact on stakeholders - EU consumers: Positive impact from enhanced data protection, ensuring their personal and financial data is handled securely. However, if compliance costs lead to higher fees or fewer product options, consumers could face reduced choice. - PEPP providers (financial institutions): Negative impact from additional compliance burdens, including potential system upgrades, data audits, and legal adjustments. Smaller providers may be disproportionately affected. - National data protection authorities: Positive impact as the opinion reinforces their role in overseeing PEPP compliance, potentially increasing their workload and enforcement responsibilities. - EU regulatory bodies (EIOPA, EDPB): Positive impact as the opinion provides clear guidance for future rulemaking, but may require coordination between financial and data protection regulators.
Expected institutional follow-up The Council will consider the EDPS opinion during its deliberations on the PEPP amendment. The European Parliament, which is co-legislator, will also receive the opinion. The next steps involve the Council's working parties and the Parliament's committees (likely ECON and LIBE) reviewing the recommendations before trilogue negotiations. The opinion may influence the final text, particularly on data protection provisions, but is not binding on the co-legislators.
← Atlas › News › Economy & Taxation