Filter Search for grants
Call Navigation
Call key data
Call for proposals to national data protection authorities on reaching out to stakeholders in data protection legislation
Funding Program
Citizens, Equality, Rights and Values programme
Call number
CERV-2026-DATA
deadlines
Opening
26.02.2026
Deadline
28.05.2026 17:00
Funding rate
90%
Call budget
€ 2,300,000.00
Estimated EU contribution per project
between € 75,000.00 and € 250,000.00
Link to the call
Link to the submission
Call content
short description
This call aims to facilitate compliance with the General Data Protection Regulation (GDPR) among small and medium-sized enterprises (SMEs), small mid-cap enterprises (SMCs) and organisations with a similar number of employees.
Call objectives
Building on experience gained from the calls for proposals launched in 2017, 2019, 2020, 2021 and 2024, and in view of implementing the conclusions of the 2024 report on the application of the GDPR,the Commission’s broader implementation and simplification agenda and the Data Union Strategy, actions under this priority should aim to further support activities carried out by national data protection authorities in Member States to facilitate the implementation of GDPR obligations by small and medium-sized enterprises, small mid-caps and organisations with a similar number of employees.
Expected effects and impacts
Facilitating compliance with the General Data Protection Regulation (GDPR) among small and medium-sized enterprises (SMEs), small mid-cap enterprises (SMCs) and organisations with a similar number of employees.
- Improved compliance with GDPR obligations among SMEs, SMCs and organisations with a similar number of employees;
- Increased awareness of data protection rules among SMEs, SMCs and organisations with a similar number of employees;
- Improved exchange and uptake of good practices among national data protection authorities.
Expected results
Helping national data protection authorities in Member States reach out to businesses and organisations by:
- Supporting activities carried out by national data protection authorities to facilitate the implementation of GDPR obligations by small and medium-sized enterprises, small mid-caps and organisations with a similar number of employees; these activities should in particular include providing practical guidance, templates, or digital tools that can be replicated in other Member States; or
- Supporting activities carried out by national data protection authorities to raise awareness of the opportunities provided by codes of conduct and certifications for facilitating compliance with the GDPR and to encourage their development, in particular transnational codes of conduct and European Data Protection Seals which contribute to the consistent application of the GDPR across the EU/EEA.
Interventions to reach out to businesses and organisations shall take into account a gender-equality perspective in their design and implementation.
This involves applying due diligence to gender specific needs and risks, including but not limited to:
- The communication and exchange of information, in particular paying attention to the inclusivity of language.
- The collection, use and presentation of data disaggregated by sex.
- The presentation of information encouraging people of all genders to exercise their data protection rights
Successful projects should ensure easy access to and wide dissemination of their results to all groups of society including minorities, and specifically people with disabilities.
read more
Eligibility Criteria
Regions / countries for funding
Moldova (Moldova), Albania (Shqipëria), Bosnia and Herzegovina (Bosna i Hercegovina / Босна и Херцеговина), Kosovo (Kosova/Kosovë / Косово), Montenegro (Црна Гора), North Macedonia (Северна Македонија), Serbia (Srbija/Сpбија), Ukraine (Україна)
eligible entities
Education and training institution, Non-Profit Organisation (NPO) / Non-Governmental Organisation (NGO), Other, Private institution, incl. private company (private for profit), Public Body (national, regional and local; incl. EGTCs), Research Institution incl. University, Small and medium-sized enterprise (SME)
Mandatory partnership
No
Project Partnership
In order to be eligible:
- Lead applicants (coordinators) must be national Data Protection Authorities within the meaning of Article 51 of Regulation (EU) 2016/679, with only one application per Member State being accepted;
- Co-applicants (if any) must be
- legal entities (public or private bodies)
- established in one of the eligible countries, i.e.:
- EU Member States (including overseas countries and territories (OCTs))
- non-EU countries: countries associated to the CERV Programme or countries which are in ongoing negotiations for an association agreement and where the agreement enters into force before grant signature (list of participating countries)
- The project can be either national or transnational;
- Applications by single applicants are allowed (single beneficiaries).
other eligibility criteria
Specific cases
Natural persons — Natural persons are NOT eligible (with the exception of self-employed persons, i.e. sole traders, where the company does not have legal personality separate from that of the natural person).
International organisations — International organisations are eligible. The rules on eligible countries do not apply to them.
Entities without legal personality — Entities which do not have legal personality under their national law may exceptionally participate, provided that their representatives have the capacity to undertake legal obligations on their behalf, and offer guarantees for the protection of the EU financial interests equivalent to that offered by legal persons.
EU bodies — EU bodies (with the exception of the European Commission Joint Research Centre) can NOT be part of the consortium.
Programme Contact Points — Are eligible as coordinator or beneficiary in this call, if they have procedures to segregate the project management and the information provision functions and if they are able to demonstrate cost separation (i.e. that their project grants do not cover any costs which are covered by their other grant). This requires the following:
- use of analytical accounting which allows for a cost accounting management with cost allocation keys and cost accounting codes AND application of these keys and codes to identify and separate the costs (i.e. to allocate them to either one of the two grants)
- recording of all real costs incurred for the activities that are covered by the two grants (including the indirect costs)
- allocation of the costs in a way that leads to a fair, objective and realistic result.
Associations and interest groupings — Entities composed of members may participate as ‘sole beneficiaries’ or ‘beneficiaries without legal personality’. Please note that if the action will be implemented by the members, they should also participate (either as beneficiaries or as affiliated entities, otherwise their costs will NOT be eligible).
Countries currently negotiating association agreements — Beneficiaries from countries with ongoing negotiations for participation in the programme (see list of participating countries) may participate in the call and can sign grants if the negotiations are concluded before grant signature and if the association covers the call (i.e. is retroactive and covers both the part of the programme and the year when the call was launched).
EU restrictive measures — Special rules apply for entities subject to EU restrictive measures under Article 29 of the Treaty on the European Union (TEU) and Article 215 of the Treaty on the Functioning of the EU (TFEU). Such entities are not eligible to participate in any capacity, including as beneficiaries, affiliated entities, associated partners, subcontractors or recipients of financial support to third parties (if any).
EU conditionality measures — Special rules apply for entities subject to measures adopted on the basis of EU Regulation 2020/2092. Such entities are not eligible to participate in any funded role (beneficiaries, affiliated entities, subcontractors, recipients of financial support to third parties, etc). Currently such measures are in place for public interest trusts established under the Hungarian Act IX of 2021 or any entity they maintain (see Council Implementing Decision (EU) 2022/2506, as of 16 December 2022)
Additional information
Topics
Relevance for EU Macro-Region
EUSAIR - EU Strategy for the Adriatic and Ionian Region, EUSALP - EU Strategy for the Alpine Space, EUSBSR - EU Strategy for the Baltic Sea Region, EUSDR - EU Strategy for the Danube Region
UN Sustainable Development Goals (UN-SDGs)
project duration
zwischen 12 und 24 Monate
Additional Information
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section). Paper submissions are NOT possible.
Proposals (including annexes and supporting documents) must be submitted using the forms provided inside the Submission System (NOT the documents available on the Topic page — they are only for information).
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the Lump-Sum Budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (to be downloaded from the Portal Submission System, completed and then assembled and re-uploaded)
- Application Form Part C (KPI tool) — contains additional project data regarding the project’s contribution to EU programme key performance indicators (to be filled in directly online; all sections to be completed)
- Mandatory annexes and supporting documents (templates to be downloaded from the Portal Submission System, completed, assembled and re-uploaded):
- detailed budget table (template available in portal submission system; to be re-uploaded filled out in the format .xlsx) (mandatory)
- CVs (standard) of core project team (mandatory)
- list of previous projects (key projects for the last 4 years) (template available in Part B, recently established organisations are expected to provide an empty form in case they did not implement any key projects in the past) (mandatory)
- for participants with activities involving children (below the age of 18): child protection policy covering the four areas described in the Keeping Children Safe Child Safeguarding Standards (for private bodies: copy of their policy; for public bodies: child protection policy declaration)
Proposals are limited to maximum 45 pages (Part B).
Call documents
CERV-2026-DATACERV-2026-DATA(761kB)
Contact
+43 1 531 15–202907
ernst.holzinger@bka.gv.at
Website
CERV Contact Points 2021-2027
Website



