DPO Hub
Featured posts
Digital Omnibus

Digital Omnibus

20-21 Oct: 🔥 Timeline update from noyb and Council agreed their position on GDPR and ePrivacy changes:
Events 2026

Events 2026

Next up: 21-23 Oct 🇩🇰 Copenhagen: ITechLaw 2026 European Conference I 22-23 Oct 🇳🇴 Sandefjord: Det årlige personvernkurset
Right of access (DSARs)

Right of access (DSARs)

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide.
Data protection impact assessments – DPIAs

Data protection impact assessments – DPIAs

Key resources for data protection impact assessment – DPIAs. Latest: EDPB shares new DPIA template (it's excessive)...
Personal data breaches

Personal data breaches

…
DPO role key resources

DPO role key resources

Key DPO role resources: CJEU rulings, EDPB/WP29 Guidelines, DPA guidance and more.
Lawfulness: Consent

Lawfulness: Consent

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
Lawfulness: Legitimate interest

Lawfulness: Legitimate interest

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance).
The DPO role: Article 37(1)(b)

The DPO role: Article 37(1)(b)

Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
EDPB

EDPB meeting minutes 7-8 Oct 2025

paid – 3 min read
Discussing SRB v EDPS, Helsinki Statement and Anonymisation guidelines: stakeholder event coming | Questions on Consent or Pay guidelines | 💡 DPAs focus & challenges | CEF topic 2026 | Joint DMA ↔ GDPR interplay guidelines | ❌ No joint DPIA/FRIA template | GPA resolutions | BCRs: 🇫🇷 Tessi, 🇵🇱 Box
EDPB

EDPB meeting minutes 11 Sep 2025

paid – 2 min read
DSA ↔ GDPR interplay guidelines | 🇧🇷 Brazil & 🇬🇧 UK adequacy decisions | Helsinki Statement – practical implementation & Commission on simplifying breach reporting | EDPS C-413/23 update | BCRs: 🇮🇪 Shopify, 🇱🇺 Northern Trust, Ferrero Group, 🇳🇴 Mowi.
EDPB EDPS EUDPR

The Coordinated Supervision Committee (CSC)

paid – 2 min read
EU Entry Exit System took effect on 12 Oct – EDPS press release 24 Oct | The CSC brings together DPAs and the EDPS to coordinate supervision of large-scale IT systems (e.g. IMI, Europol, SIS, Eurojust) and EU bodies under the EUDPR or relevant EU laws.
EDPB

EDPB meeting minutes 8 Jul 2025

paid – 2 min read
Joint EDPB-EDPS simpler ROPA opinion | Data Act MCTs & SCCs | Comments on EC's Art. 28 DSA Guidelines | Update on 🇩🇪 Federal DPA Vodafone €45m fines | BCRs: 🇳🇱 Aramex, 🇳🇴 Wilh. Wilhelmsen Group | Certification criteria: 🇦🇹 BDO, 🇩🇪 TÜV IT
topic resource DPOs

The DPO role: Article 37(1)(b)

paid – 5 min read
Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
Chief of Updates
Rie Aleksandra
Rie Aleksandra
Great! Next, complete checkout for full access to DPO Hub.
Welcome back! You've successfully signed in.
You've successfully subscribed to DPO Hub.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.