ECB Clarifies Joint Responsibility for Personal Data in Bank Supervision

The European Central Bank (ECB) has adopted a new decision that outlines joint responsibility for personal data processed in bank supervision. This decision, Decision (EU) 2026/1942, was published in the Official Journal on August 14, 2026.

The decision sets out how the ECB and national competent authorities share responsibility for personal data processed under the Single Supervisory Mechanism. It is based on Article 28 of Regulation (EU) 2018/1725 and Article 26 of the General Data Protection Regulation.