europarl.europa.eu

Context

europarl.europa.eu is the official portal of the European Parliament. It processes EU citizens’ data under Regulation (EU) 2018/1725 — the special regulation for EU institutions, the public-sector counterpart to GDPR for the Union. A DPO is appointed, and a public register of processing operations is maintained. HAR: 60 requests, 2 domains.

What the HAR shows

Two domains — www.europarl.europa.eu and eubudget.europarl.europa.eu. Both are europa.eu subdomains. Not a single external request, not a single Set-Cookie response, not a single consent request. Fonts, scripts, styles — all served from proprietary infrastructure. There is no consent banner — and none should be needed if no cookies are set.

Regulation 2018/1725

EU institutions do not fall under GDPR — they are governed by Regulation (EU) 2018/1725, adopted the same day as GDPR but specifically for the Union’s institutions. Oversight is provided not by a national regulator, but by the EDPS (European Data Protection Supervisor). The European Parliament upholds this standard at the level of its public website: no external recipients, no tracking, no cookies.

Comparison with other institutions in the series

eulisa.europa.eu and edpb.europa.eu showed a similar picture. The European Parliament is the third institution in this series to maintain a zero external-request profile on its public site. This is not a coincidence — it is an architectural policy of the europa.eu domain.

Conclusion

60 requests, 2 europa.eu domains, zero external services. The institution that adopted GDPR and Regulation 2018/1725 upholds them itself, at the level of its public portal.