Adequacy decisions
transfers

Adequacy decisions

members – 3 min read
20 Oct: EDPB adopts opinions on UK GDPR & LED | 16 Sep: Republic of Korea EU adequacy decision | 5 Sep: Commission with 🇧🇷 Brazil draft adequacy decision – Up next: EDPB Opinion, Member States reps approval and EP "right of scrutiny" | 22 July: Commission deems 🇬🇧 UK DUAA adequate.
Rie Aleksandra Rie Aleksandra
EDPB meeting minutes 8 Jul 2025
EDPB

EDPB meeting minutes 8 Jul 2025

members – 2 min read
Joint EDPB-EDPS simpler ROPA opinion | Data Act MCTs & SCCs | Comments on EC's Art. 28 DSA Guidelines | Update on 🇩🇪 Federal DPA Vodafone €45m fines | BCRs: 🇳🇱 Aramex, 🇳🇴 Wilh. Wilhelmsen Group | Certification criteria: 🇦🇹 BDO, 🇩🇪 TÜV IT
Rie Aleksandra Rie Aleksandra
Events 2025

Events 2025

members – 5 min read
Up next: 🇩🇪 ENISA Annual Privacy Forum 🇲🇹 IDPC FRIA workshop 🇫🇮 Cyber Security Nordic 🇮🇪 PDP Data Protection Conference 🇬🇧 Privacy Space 🇧🇪 IAPP 🇬🇧 WI Data Protection Conference 🇳🇴 Personvernkonferansen 🇳🇱 AI Supervisory Congress 🇸🇪 IMY DPO "conference" (=3-hour webinar)
Rie Aleksandra Rie Aleksandra
EDPB CEF: Coordinated Enforcement Framework
EDPB

EDPB CEF: Coordinated Enforcement Framework

members – 2 min read
2026 topic: 📝 transparency & information | 2025 report due in "months" | The EDPB created the CEF initiative under its 2021-2023 Strategy to enhance enforcement and strengthen cooperation among DPAs. Each year, they collectively choose a priority enforcement topic for coordinated (voluntary) action.
Rie Aleksandra Rie Aleksandra
The DPO role: Article 37(1)(b)
topic resource DPOs

The DPO role: Article 37(1)(b)

members – 5 min read
10 Oct: Estonia's thresholds for 'large-scale' (5k, 10k, 50k) | Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
Rie Aleksandra Rie Aleksandra
EDPB meeting agendas and minutes
EDPB

EDPB meeting agendas and minutes

members – 7 min read
9 Oct Press release: DMA ↔ GDPR interplay guidelines published for public consultation | Oct agenda: 🚨 Draft 'Consent or Pay' guidelines to be discussed | Enforcement strategies | EDPB stakeholder engagement | Selecting topics for CEF 2026 | BCR draft decisions: 🇫🇷 Tessi, 🇵🇱 Box
Rie Aleksandra Rie Aleksandra