DPO Hub (Page 13)

Digital Omnibus

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:

Events 2026

Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset

Right of access (DSARs)

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.

Data protection impact assessments – DPIAs

Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...

DPO role key resources

Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.

Lawfulness: Consent

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

Lawfulness: Legitimate interest

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

The DPO role: Article 37(1)(b)

Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?

ICO approves first sector-owned UK GDPR Code of Conduct for private investigators

paid – 1 min read

🇬🇧 ICO: "This code, which investigators in the private sector can sign up to, will provide certainty and reassurance to those using their services [and] assist investigators to navigate the challenges between conducting investigations whilst respecting people’s privacy rights."

Nov 14, 2024

EDPB meeting minutes 7-8 Oct 2024

paid – 2 min read

Must-read update! Will we get PCs for Art. 64(2) Opinions? Strategic case coming to an end. Updates on recent Opinions and Guidelines + DPA news: New 🇦🇹 DPA for the legislative sector, 🇸🇪 new Director, 🇪🇸 Director leaving, 🇽🇰 becomes observer, new tools from 🇱🇹&🇭🇷 + lots of DPA networking.

Nov 8, 2024

Takeaways from EDPB's AI models stakeholder event 5 Nov

paid – 1 min read

The EDPB has now held their stakeholder event and the Opinion is due by the end of the year. Check out these LinkedIn posts (and comments) to hear how it went!

Nov 6, 2024

EDPB Guidelines 1/2024 Legitimate interests (public consultation)

paid – 4 min read

The EDPB's recent new legitimate interest guidelines are on public consultation until 20 Nov 2024. Initial analysis: 📝 Document, document, document.

Oct 28, 2024

EDPB Opinion 22/2024: obligations when relying on (sub-)processors

paid – 8 min read

📚 You must list all (sub-sub-sub-sub...)processors (name, address, contact person, processing activity, roles & responsibilities) and always verify they've provided 'sufficient guarantees'—though the extent might vary based on risk—also for onwards transfers.

Oct 22, 2024

CJEU C-634/21 SCHUFA Holding (Scoring) 7 Dec 2023

paid – 4 min read

…

Oct 20, 2024

EDPB Guidelines 2/2023 Technical Scope of Art. 5(3) ePrivacy Directive

paid – 1 min read

Likely one of the EDPB’s most controversial documents to date, though the sub-processor Opinion will definitely give it strong competition for first place!

Oct 16, 2024

EDPB meeting minutes 17 Sep 2024

paid – 1 min read

New 💸 fines guidelines coming at the end of 2025. Plus, an exciting Support Pool of Experts legal report on 'the extra-territorial enforcement of the GDPR' is coming soon.

Oct 15, 2024

🚨 EDPB: (sub-)processor Opinion, legitimate interest Guidelines, draft enforcement regulation Statement, 2024-2025 work programme

paid – 1 min read

Controllers should keep identity of *all* processors and sub-processors "readily available at all times" and their obligation to verify (sub-)processors' ‘sufficient guarantees’ should apply regardless of the risk. The EDPB also shares legitimate interest Guidelines for public consultation and more.

Oct 9, 2024

CJEU LED ePD C-548/21 Bezirkshauptmannschaft Landeck (Attempt to access personal data stored on a mobile phone) 4 Oct 2024

paid – 1 min read

…

Oct 4, 2024

Chief of Updates

Rie Aleksandra