Rie Aleksandra - DPO Hub

EDPB Guidelines 2/2025 Blockchain (public consultation)

members – 1 min read

New EDPB Guidelines are now open for public consultation (until 9 June) on processing of personal data through blockchain technologies.

Apr 14, 2025

EDPB Support Pool of Experts (SPE) projects

members – 4 min read

An overview of SPE projects. Latest: AI Privacy Risks and Mitigations LLMs (Apr) | AI: Complex Algorithms and effective Data Protection Supervision + OSS Case Digest: Right of access (Jan)

Apr 14, 2025

Events 2025

members – 4 min read

New: 🇫🇷 European Health Data Protection Congress 15-17 Oct | ICO Anonymisation & Pseudonymisation guidance webinar 22 May | Want to connect with fellow hubsters? Read where people are heading in the NoTies Community.

Apr 14, 2025

National DPA news

members – 2 min read

Apr 14, 2025

AI (Act) resources

members – 12 min read

Apr 14, 2025

EDPB meeting minutes 11 Feb 2025

members – 2 min read

Skip reading this if you already read the 12 Feb press release. Commission’s watching EU-US DPF “with interest” (but no more info). ChatGPT taskforce now “Generative AI Enforcement”, will cover DeepSeek. Second LED report due May 2026. Three new CSC databases.

Apr 11, 2025

EDPB subgroups and taskforces

members – 4 min read

Guidance, opinions, decisions, statements and letters are prepared in subgroups or taskforces. Here's the overview!

Apr 11, 2025

CJEU C-710/23 Ministerstvo zdravotnictvi 3 Apr 2025

members – 3 min read

GDPR still applies when acting on behalf of a legal person. Plus, major implications for 🇨🇿 Czech – and potentially other – public bodies handling FOI requests: you may need to consult data subjects before disclosure, and even if that's impossible, you must still balance FOI with data protection.

Apr 11, 2025

EDPB meeting agendas and minutes

members – 4 min read

11 Feb minutes ready but not much new (= can be skipped). 8 April agenda: Upcoming guidelines on 1) blockchain, and 2) AI Act ↔ EU data protection law. SPE project on LLM risks and mitigation measures. And did they really "discuss" the DPF?

Apr 7, 2025

Norway DPA with new cookie ePrivacy guidance

members – 1 min read

If you're based in Norway, this is a must-read!

Apr 3, 2025

ICO Anonymisation and pseudonymisation guidance

members – 2 min read

The UK ICO has published its updated anonymisation and pseudonymisation guidance – grab the PDF here. And please tell them we want the RSS feeds back.

Mar 30, 2025

CJEU C-654/23 Inteligo Media 27 Mar 2025 AG Opinion

members – 2 min read

AG Szpunar: If someone creates an online account that includes access to your email newsletters, sending them qualifies as 'direct marketing’ under the ePrivacy Directive Article 13 and is covered by the exception in point 2. Under Article 95 GDPR, a lawful basis under Article 6 isn’t needed.

Mar 27, 2025