DPO Hub

Digital Omnibus

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:

Events 2026

Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset

Right of access (DSARs)

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.

Data protection impact assessments – DPIAs

Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...

DPO role key resources

Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.

Lawfulness: Consent

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

Lawfulness: Legitimate interest

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

The DPO role: Article 37(1)(b)

Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?

Digital Omnibus

paid – 25 min read

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:

Oct 21, 2026

Right of access (DSARs) – WIP new hub post

paid – 4 min read

What to do when a DSAR arrives.

Sep 26, 2026

Welcome! Start here 👇

paid – 2 min read

Hey hubster! I've used DPO Hub regularly as a full-time DPO for 1+ year now and while I'm using it weekly, it's clear how it could be even more useful. Stay tuned for more templates and practical tips onwards.

Sep 19, 2026