EDPB Support Pool of Experts (SPE) projects
members
–
6 min read
Latest: Legitimate interest OSS case digest.
CJEU C-526/24 Brillen Rottler 19 Mar 2026
members
–
2 min read
If a DSAR is made solely to engineer a compensation claim rather than to verify lawful processing, it can be refused as abusive – even if it's the first request.
Luxembourg DPA fines Amazon Europe €746m
members
–
2 min read
13 March 2026: Amazon with big win – a Luxembourg appeals court has overturned the €746 million fine and referred the case back to the DPA.
Lawfulness: Legitimate interests
members
–
3 min read
17 Mar 2026: 🇳🇴 Datatilsynet with updated legitimate interest guidance. Could this mean the final EDPB Guidelines 1/2024 is just around the corner?
Personal data breaches – in practice
members
–
2 min read
A breach happens. What now? When are you "aware", how do you assess the risk – and who do you need to notify? 📝 Homework: download the revised breach flowchart, tailor it to your organisation and ensure you have a step-by-step process in place.
EDPB Strategy and Work Programmes
members
–
4 min read
💡 EDPB only to do a "targeted update" to DPO Guidelines | "Easing compliance is at the top of the EDPB agenda" – lets see how that plays out in practice.
Data breaches
members
–
3 min read
🇳🇴 DPA with significant breach page change | Upcoming topic page for breaches, prompted by EDPB's summary document. Links so far: Denmark, Finland, France, Greece, Ireland, Italy, Norway, Spain, Sweden, ICO, EDPB, EDPS, EC.
EDPB CEF 2025: Right to erasure (right to be forgotten)
members
–
4 min read
💡 Should-read key takeaways for controllers from the final report. And do we need to sift through back-ups when we get an erasure request..?
EDPB Guidelines 1/2025 Pseudonymisation (public consultation)
members
–
2 min read
New report from the Dec 2025 stakeholder event | EDPB hotly debated pseudonymisation guidelines – still in the works.
EDPB CEF: Coordinated Enforcement Framework
members
–
2 min read
2025 report ready | 2026 topic: 📝 transparency & information | The EDPB created the CEF initiative under its 2021-2023 Strategy to enhance enforcement and strengthen cooperation among DPAs. Each year, they collectively choose a priority enforcement topic for coordinated (voluntary) action.
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
members
–
12 min read
🇩🇰 DPA concludes the case, applies the dreaded EDPB Opinion and signal enforcement change – and shares takeaways in webinar. Must-read if you're in Denmark but crucial to everyone using third-country processors, especially US ones.