The Coordinated Supervision Committee of the European Data Protection Board (CSC – EDPB) was created in 2018 in accordance with Article 62 of the GDPR, which provides that the European Data Protection Supervisor (EDPS) and the national supervisory authorities, each acting within the scope of their respective competences, shall cooperate actively within the framework of...
The European Data Protection Supervisor announces that on 16 & 17 June 2022, it will host a conference in Brussels bringing together global stakeholders from the digital regulatory sphere to reflect on and discuss current approaches to enforcement models. The conference will create a platform for discussion of the world’s best practices when it comes...
Wojciech Wiewiórowski, the European Data Protection Supervisor (EDPS), has published an article on Politico to motivate his call for a more effective implementation of the EU General Data Protection Regulation (GDPR). Find the article here.
PrivacyRules exclusive legal member for Thailand, Paul Crosio from the Silk Legal law firm, publishes an article to stress the importance of updating privacy policies as a result of the Thailand’s Personal Data Protection Act (PDPA). The article also highlights comparative elements with the EU General Data Protection Regulation (GDPR). Read the article here.
The Italian DPA (Garante per la protezione dei dati personali) has sanctioned the public administration INAL with a €50,000 fine for three recorded incidents that resulted in unauthorized access to sensitive data of some beneficiaries. The Garante underlines that all public bodies, in particular those with relevant institutional duties, must adopt adequate technical and organizational...
The Berlin DPA (Berliner Beauftragten für Datenschutz und Informationsfreiheit) has published a concise guideline on international data transfers relating to Art. 44 and following of the EU GDPR. The guideline notes that personal data may only be processed if there is a permit for this in the law. If personal data is to be transferred...
The Dutch Data Protection Authority (DPA – Autoriteit Persoonsgegevens) has published the the Smart Net Management Code of Conduct related to the processing of personal data by network operators. This code of conduct describes in concrete terms how network operators providing services in The Netherlands must comply with the EU GDPR on activities such as...