DPO Hub
Featured posts
Digital Omnibus

Digital Omnibus

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:
Events 2026

Events 2026

Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset
Right of access (DSARs)

Right of access (DSARs)

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Data protection impact assessments – DPIAs

Data protection impact assessments – DPIAs

Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...
Personal data breaches

Personal data breaches

…
DPO role key resources

DPO role key resources

Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.
Lawfulness: Consent

Lawfulness: Consent

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
Lawfulness: Legitimate interest

Lawfulness: Legitimate interest

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
The DPO role: Article 37(1)(b)

The DPO role: Article 37(1)(b)

Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
transfers EUDPR

New SCCs on public consultation (delayed again)

paid – 1 min read
Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR
resource

National DPA news

paid – 6 min read
🇳🇴 Datatilsynet initiates comprehensive audit of every municipality's security measures.
EDPB

EDPB meeting minutes 16 Oct and 4 Nov 2025

paid – 2 min read
2 x meeting minutes today! 🚨 Guidelines: Joint AI Act ↔ EU data protection law interplay; Political advertisements; Web scraping in the context of generative AI | 🚨 Irish, French & Dutch DPAs investigate data brokers | 🇧🇷 & 🇬🇧 adequacy decisions
Chief of Updates
Rie Aleksandra
Rie Aleksandra
Great! Next, complete checkout for full access to DPO Hub.
Welcome back! You've successfully signed in.
You've successfully subscribed to DPO Hub.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.