_EDPB

28/07/2020

Organizations are left with no practical legal grounds to transfer personal data to the United States. “A new age of data transfers” Part III

Topics:

CJEU EDPB EDPS Privacy and data protection Privacy Shield SCC Schrems
After the official statements of the European Data Protection Board (EDPB) and several Supervisory Authorities (SAs), it is clear that at the moment there is no practical way for data to lawfully flow from the EU to the US. The reasoning in 5 steps: On 16 July 2020 the Court of Justice of the European Union (CJEU) invalidated the […]
Continue reading

19/04/2020

UPDATE (i): “PUBLIC HEALTH AND PRIVACY” AND NOT “PUBLIC HEALTH OR PRIVACY”: A COLLECTION OF GUIDANCE ON COVID-19

Topics:

Cybersecurity EDPB EDPS GDPR Privacy Privacy and data protection
In the evolving COVID-19 scenario in which business continuity also depends on adequate data protection and cybersecurity practices on the part of organizations, knowledge mapping of privacy & data protection guidance and cybersecurity best practices has taken on an even more important role. It’s for that very reason that, without the presumption of completeness, I […]
Continue reading

26/03/2020

“Public health AND Privacy” and not “Public health OR Privacy”: A collection of Guidance on COVID-19

Topics:

DPA EDPB Garante Privacy GDPR ICO Privacy and data protection Security Supervisory authorities Uncategorized
Below is an attempt (without the presumption of completeness) to map all the official resources providing guidance on the correct processing of personal data in the context of COVID-19 and Cybersecurity-related information on working remotely in the context of the COVID-19 pandemic. I genuinely hope this will help in the effort of achieving “Public health AND Privacy”! Stay safe and […]
Continue reading

16/03/2020

EDPB on personal data processing in the COVID-19 outbreak

Topics:

EDPB GDPR Law Enforcement Access Privacy Privacy and data protection
On 16 March the Chair of the European Data Protection Board (EDPB) Andrea Jelinek released a statement to help guide the data processing activities of public authorities, governments, and private organizations within the context of the COVID-19 pandemic. Andrea Jelinek noted that: “Data protection rules (such as GDPR) do not hinder measures taken in the […]
Continue reading

16/12/2019

Brexit and data protection: What’s next?

Topics:

Brexit EDPB GDPR ICO International Data Transfers International Trade Agreement Privacy SCC Supervisory authorities
On 12 December 2019 in the UK general election, Boris Johnson secured his position as UK Prime Minister, with his Conservative party winning its first substantial majority in decades. The results of the election have set the way for the UK to exit the European Union by its scheduled exit date of 31 January 2020.  The […]
Continue reading

21/10/2019

European Data Protection Board adopts Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects

Topics:

EDPB GDPR Privacy Privacy and data protection
The European Data Protection Board has published its updated Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects following public consultation. The Guidelines were adopted by the Board on 8 October 2019 and concern the “applicability of Article 6(1)(b) to […]
Continue reading

24/07/2019

EU Commission and Parliament take stock on Data Protection in the EU

Topics:

Data protection by design EDPB European Commission Uncategorized
Today, 25 July 2019, the European Commission and the European Parliament published a Communication outlining the state of data protection in the EU. The document touches on consistent implementation of the GDPR, how the new governance system is working, and the impact that it has had, also in a global level, in terms of citizens […]
Continue reading

09/12/2018

5th EDPD Plenary Session: EU-Japan draft adequacy decision, DPIA lists, Artile 43 GDPR

Topics:

EDPB GDPR International Data Transfers International Trade Agreement Privacy Privacy and data protection Supervisory authorities
The 5th EDPD Plenary Session took place last week on 4 and 5 December 2018.  Main points of the agenda included the EU-Japan draft adequacy decision, the adoption of opinions on the Data Protection Impact Assessment (DPIA) lists submitted by Denmark, Croatia, Luxembourg and Slovenia, and the revision of the Article 29 Working Party guidelines on accreditation. […]
Continue reading

20/11/2018

4th EDPB Plenary session recap

Topics:

EDPB GDPR International Data Transfers Privacy Privacy and data protection
On 16 November the European Data Protection Authorities gathered for the 4th plenary session of the European Data Protection Board and yesterday, 19 November, a summary of some of the most important aspects discussed at the meeting was published providing an update on the EU-Japan draft adequacy decision, Clinical Trials Regulation and territorial scope. Here are the […]
Continue reading

16/11/2018

Agenda of the 4th EDPB meeting

Topics:

EDPB
The 4th meeting of the EDPB takes place today on 16 November 2018. The Agenda for the meeting is available for consultation here. Topics for discussion and/or adoption included reorganisation of the EDPB subgroups, Brexit, the Consultation on COM’s draft question and answer document on interplay between Clinical Trial Regulation and GDPR: attribution of the […]
Continue reading
Exploring the intersections of law, technology, and social responsability.