🔥 Norway DPA clarifies: *paper* copy not necessary required | 1 July: added 🇩🇰 case | All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide (including how to deal with nightmare DSARs).
Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR
🚨 Guidelines x3 ready: anonymisation, AI web scraping, blockchain | TIA template on the way. Breach template public consultation till 5 Aug. Guidelines x 5: scientific research | children's data | political ads | DMA ↔ GDPR interplay. New Art. 65 Binding Decision. Certifications Opinions.
Latest: 3rd SPE report published quietly... 🤨 | About SPE: What is it, what have they spent (and spend) time and resources on, is it justified based on the current results, and should you apply? (Likely not.) Should you even spend time reading this post?
Council to drop legitimate interest legal basis for AI in Digital Omnibus proposal? | Digital Omnibus: COM's proposal to simplify AI, cybersecurity and (personal) data rules to "save businesses up to €5bn by 2029".