Adequacy decisions
22 July: UK DUAA deemed adequate by the Commission ✅. Up next for the draft decisions: EDPB Opinion, Member States reps approval and EP "right of scrutiny".
Jul 22, 2025
—
2 min read
You might also like
EDPS audit of the Commission's MS365 use
members
–
11 min read
28 July: EDPS closes its investigation into the European Commission’s use of Microsoft 365, now deeming it compliant after previously finding serious EUDPR violations, notably on purpose limitation and international transfers.
🇮🇪 DPC fines TikTok €530m for China transfers
members
–
3 min read
10 July: DPC launches new investigation into China transfers. Earlier: transparency breach by failing to disclose the third countries involved and didn't explain the nature of the transfers in its privacy policy --> get compliant in six months or stop the transfers (but order paused until Oct).
CNIL shares transfer impact assessment (TIA) practical template
members
–
2 min read
NB: On 9 July, CNIL appears to have updated the webpage with that date, though there don’t seem to be any actual changes – and the PDFs are still from January. Either way, here’s a quick reminder! 💬 "CNIL TIA template is one of the best templates available to the public!"