Rie Aleksandra - DPO Hub

AI (Act) resources

members – 8 min read

🇪🇸 DPA article on AI training with machine learning and neural networks. Future of Privacy Forum infographic. EDPB reply to AI Office: AI Models Opinion will be adopted 🗓️ 23 Dec.

Dec 13, 2024

EDPS: the European Commission's use of MS365 is non-compliant

members – 10 min read

10 Dec: EC submits decision compliance report, but both sought annulment in July—more to come! After the EDPS' second investigation into the EC's use of Microsoft 365, they found (again) several serious EUDPR violations, notably related to purpose limitation and transfers, which are still ongoing.

Dec 11, 2024

Events 2024

members – 3 min read

🇪🇺 AI Office hosts 2nd AI Architecture webinar 17 Dec. PS: The event page might be completely revamped for 2025. See discussion post in the 💛 Community, where folks are already sharing where they're heading in 2025.

Dec 10, 2024

CJEU C-446/21 Schrems (Communication of data to the general public)

members – 5 min read

UPDATED: No big surprises, nor new big takeaways, but this ruling sparks questions around 'strictly necessary' and 'purpose'. Ruling: Facebook can't indiscriminately use personal data on or off their platform for personalised ads, without restricting the duration and type of data.

Dec 8, 2024

EDPB meeting minutes 4 Nov 2024

members – 2 min read

Never-before discussed 'Guidelines on the use of biometrics for physical access control' enter the spotlight! And "first complaint under the DPF redress mechanism"..? Here's the latest EDPB meeting minutes.

Dec 7, 2024

EDPB meeting agendas and minutes 2024

members – 2 min read

Latest: 📝 4 Nov meeting minutes 📋 2-3 Dec agenda (adopting "Datenschutz Cert GmbH CAP national" and "Brand Compliance" certification criteria, discussing Art. 48 Guidelines, and future of the taskforce on the interplay between data protection, consumer protection and competition)

Dec 7, 2024

EDPB letter to the Commission on its review of 11 DPD adequacy decisions

members – 1 min read

EDPB Chair Anu Talus writes the Commissioner for Justice on the Commission's review of 11 adequacy decisions adopted under Directive 95/46/EC for: Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland, and Uruguay. And isn't entirely happy.

Dec 6, 2024

EDPB Guidelines 2/2024 Article 48 (public consultation)

members – 4 min read

New EDPB Guidelines are now open for public consultation (until 25 Jan) on Article 48, which covers official requests from third country public authorities for personal data transfers.

Dec 6, 2024

EDPB urges digital legislation to be aligned with the GDPR

members – 1 min read

The EDPB calls for digital legislation to align with the GDPR, emphasising the importance of legal certainty and coherence. And highlights the need for additional resources to support DPAs and the EDPB in addressing increasingly complex challenges.

Dec 5, 2024

📊 DPO Hub Pulse: AI topic page?

members –

Disclaimer: Work is underway on the legitimate interest topic page, but here’s your chance to weigh in on an AI one.

Dec 4, 2024

🚨 EDPB shares Art. 48 Guidelines (PC) and new Data Protection Seal certification

members – 1 min read

The EDPB just shared new Guidelines! This time for Article 48 and they're on public consultation until 25 Jan 2025. They also announced a new EU Data Protection Seal certification for 'Brand Compliance'.

Dec 3, 2024

🇪🇺 Privacy, data protection & security legal landscape

members – 5 min read

'Big 5' (DSA, DMA, DGA, DA, AIA) doesn't cut it anymore. Post revamp to capture key developments like Cyber Resilience Act adopted. Latest: VLOPs & VLOSEs to share 1st DSA risk assessment + audit reports. EC shares DA public consultation summary report. EC shares Data Act FAQ + DGA practical guide.

Nov 29, 2024