DPO Hub (Page 23)

Digital Omnibus

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:

Events 2026

Next up: 7-11 Dec 🇦🇪 Dubai: Global Privacy Assembly I 4 Dec 🇳🇴 Oslo: Personvernkonferansen

Right of access (DSARs)

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.

Data protection impact assessments – DPIAs

Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...

DPO role key resources

Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.

Lawfulness: Consent

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

Lawfulness: Legitimate interest

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).

The DPO role: Article 37(1)(b)

Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?