Featured posts
Digital Omnibus
20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:
Events 2026
Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset
Right of access (DSARs)
All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Data protection impact assessments – DPIAs
Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...
DPO role key resources
Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.
Lawfulness: Consent
When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
Lawfulness: Legitimate interest
When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
The DPO role: Article 37(1)(b)
Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
EDPB meeting minutes 4 Nov 2024
paid
–
2 min read
Never-before discussed 'Guidelines on the use of biometrics for physical access control' enter the spotlight! And "first complaint under the DPF redress mechanism"..? Here's the latest EDPB meeting minutes.
EDPB letter to the Commission on its review of 11 DPD adequacy decisions
paid
–
1 min read
EDPB Chair Anu Talus writes the Commissioner for Justice on the Commission's review of 11 adequacy decisions adopted under Directive 95/46/EC for: Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland, and Uruguay. And isn't entirely happy.
EDPB urges digital legislation to be aligned with the GDPR
paid
–
1 min read
The EDPB calls for digital legislation to align with the GDPR, emphasising the importance of legal certainty and coherence. And highlights the need for additional resources to support DPAs and the EDPB in addressing increasingly complex challenges.
📊 DPO Hub Pulse: AI topic page?
paid
–
Disclaimer: Work is underway on the legitimate interest topic page, but here’s your chance to weigh in on an AI one.
🚨 EDPB shares Art. 48 Guidelines (PC) and new Data Protection Seal certification
paid
–
1 min read
The EDPB just shared new Guidelines! This time for Article 48 and they're on public consultation until 25 Jan 2025. They also announced a new EU Data Protection Seal certification for 'Brand Compliance'.
Chief of Updates
