EDPB - DPO Hub

The Coordinated Supervision Committee (CSC)

members – 1 min read

New Activities report (likely irrelevant for most). The CSC brings together DPAs and the EDPS to coordinate supervision of large-scale IT systems (e.g. IMI, Europol, SIS, Eurojust) and EU bodies under the EUDPR or relevant EU laws.

Feb 21, 2025

EDPB meeting minutes 16 jan 2025

members – 1 min read

Anonymisation Guidelines coming (no date yet), Revised DPO Guidelines due Q2 2026, IAB Europe TC String 🇧🇪 national ruling due 19 March, New Support Pool of Experts report: AI bias and data subjects’ rights.

Feb 18, 2025

EDPB meeting minutes 17 Dec 2024

members – 1 min read

No big news - summary of their AI models Opinion discussion (where, interestingly, one EU member voted against adoption). You can safely skip this update.

Feb 18, 2025

EDPB Guidelines 1/2025 Pseudonymisation (public consultation)

members – 1 min read

The EDPB's recently shared pseudonymisation guidelines are on public consultation until 28 Feb. Today they've also shared a handy diagram.

Feb 14, 2025

EDPB press release: AI enforcement task force, age assurance and WADA recommendations

members – 1 min read

EDPB sets up an AI enforcement task force with a "quick response team" and adopts recommendations for WADA's 2027 World Anti-Doping Code, along with a statement on age assurance.

Feb 13, 2025

EDPB meeting minutes 2-3 Dec 2024

members – 1 min read

💡 EDPB members intervene to block new social media guidelines, arguing they interpret joint controllership too broadly and overlook practical consequences and balance against other fundamental rights. Little other news.

Feb 8, 2025

EDPB meeting agendas and minutes

members – 3 min read

Two new meeting minutes published and summarised (see separate writeups). Next meeting: 13 March.

Feb 7, 2025

CJEU GC T-70/23 Data Protection Commission v European Data Protection Board 29 Jan 2025

members – 2 min read

The General Court dismissed DPC's actions against the EDPB and ordered them to pay the costs, meaning they must conduct new investigations and issue new Art. 60(3) draft decisions for the three 2022 Art. 65 Binding Decisions in cases against Meta (Facebook, Instagram, WhatsApp).

Jan 31, 2025

EDPB Opinion 28/2024: AI models

members – 4 min read

UPDATED 27 Jan. A must-read if the subject matter is relevant. Yes, legitimate interest can apply in the context of AI models—but your documentation needs to be thorough. And don’t forget to involve your DPO.

Jan 27, 2025

EDPB Support Pool of Experts (SPE) projects

members – 4 min read

New additions: 'AI: Complex Algorithms and effective Data Protection Supervision' 23 Jan + 'OSS Case Digest: Right of access' 17 Jan. Post: An overview of SPE project so far. Which ones (if any) should you spend time on? Maybe the OSS case digests.

Jan 27, 2025

EDPB press release: Right of access CEF 2024 report

members – 1 min read

30 DPAs participated in EDPB's 2024 CEF action on the Right of access, involving 1185 controllers. 7 identified challenges like lack of documented procedures and requesting excessive ID docs. And more awareness is needed.

Jan 20, 2025

EDPB press release: 🚨 Pseudonymisation guidelines + working with competition authorities

members – 1 min read

Pseudonymisation guidelines on public consultation until 28 Feb! Plus, the EDPB suggest how they can cooperate with competition authorities.

Jan 17, 2025