EDPS: the European Commission's use of MS365 is non-compliant
10 Dec: EC submits compliance report. (Both parties sought annulment in July, so stay tuned!) After the EDPS' second investigation into the EC's use of Microsoft 365, they found (again) several serious EUDPR violations, notably related to purpose limitation and transfers, which are still ongoing.
Dec 11, 2024
—
10 min read
You might also like
CJEU EUDPR General Court T‑354/22 Bindl v Commission 8 Jan 2025
members
–
2 min read
The CJEU's General Court orders the European Commission to pay €400 in non-material damages for US transfers made in March 2022, when no adequacy decision or alternative safeguard was in place. Expect an appeal!
EDPB Guidelines 2/2024 Article 48 (public consultation)
members
–
4 min read
EDPB Guidelines on Article 48 covering official requests from third country public authorities for personal data transfers.
Your OSS for the EU-US DPF
public
–
5 min read
5 Nov: EDPB adopts first review report 9 Oct: EC publishes first review report, concluding the DPF 'functions effectively'. New review in 3 years. Older: Interesting read by C. Kuner on 'Strengthening the EU Legal Edifice for Data Transfers'.