The Belgian Data Protection Authority (DPA) has published its 2027 Management Plan, detailing its strategic priorities and operational objectives.

This plan translates the orientations of the 2026-2028 Strategic Plan into concrete objectives for 2026, aiming for maximum impact with limited resources. For 2027, priorities in information and awareness will focus on profiling in the banking sector, health data, and reservation data in the Horeca sector. Enforcement actions will concentrate on data processing by data brokers and within the scope of video games. A legal reform, scheduled for January 1, 2027, will allow the Management Committee to make decisions more collegially. The DPA also plans to optimize its IT tools, notably through the introduction of artificial intelligence, and to develop a policy of dismissal without further action for cases with low impact or regularized during the investigation.

On the operational level, the Authorization and Advice Service will continue to issue opinions on legislative projects and authorize access to communication metadata for the Belgian Institute for Postal Services and Telecommunications (BIPT) and the Centre for Cybersecurity Belgium (CCB). The Litigation Chamber, whose case law from the Market Court has confirmed broad discretionary competence, will strive to reduce its backlog of complaints. Its strategy for 2027 includes the use of a "shortened procedure" for simple cases, drafting more concise decisions, and strategic management of appeals. Enhanced cooperation is planned with the European Data Protection Board (EDPB) for handling cross-border cases, in application of the mechanisms of article 60 and article 65 of the GDPR.