European data protection aims to protect the privacy and related rights of individuals, purposes which come into tension with the free speech of professional journalism. Moreover, statutory Data Protection Authorities (DPAs) act as the ‘guardians’ of the data protection framework across the European Economic Area. In light of this, the article explores the enforcement efforts of these critical actors through both a DPA questionnaire and a DPA website review. The results indicate that, notwithstanding stringent statutory provisions enforceable by DPAs in many Member States, activity has been patchy even in areas which raise limited free speech concern (e.g. tackling significant inaccuracy). Nevertheless, many DPAs do engage in this area especially when sensitive or important confidential information is involved. The stringency of local law also positively correlates with the extent of enforcement, whilst the level of resourcing surprisingly does not. The article proposes action by both Member States and DPAs to ensure more regulatory coherence under the forthcoming General Data Protection Regulation.