On February 28, 2023, the EDPB has adopted its opinion on the draft adequacy decision regarding the EU-U.S. Data Privacy Framework. Even if it has welcomed the improvements of the framework, the EDPB has still expressed concerns and requests of clarifications on several points such as to certain rights of data subjects, onward transfers, the...
Following public consultation, the EDPB has adopted three sets of guidelines in their final version including the revised Guidelines 3/2021, on the Interplay between the application of Art. 3 and the provisions on international transfers as per Chapter V GDPR, to which PrivacyRules has contributed with a joint feedback from its experts from Belgium, Israel,...
The EDPB has released a thematic case digest to analyse cases requiring the One-Stop-Shop (OSS) mechanism to be activated. This is a valuable resource to understand how Supervisory Authorities (SAs) work together to enforce the GDPR. Find the Digest here
The blossoming of AI used as a business application, combined with the upcoming EU regulations in the field, are compelling many European data protection authorities to build dedicated units. The CNIL, the Autoriteit Persoonsgegevens and the ICO have already started! Read More
The Danish Data Protection Authority seriously criticizes the fact that the Danish Growth Fund has neither obtained valid consent nor fulfilled the obligation to provide information through the use of spy pixels in its newsletters. Read more here (Danish only)