Anonymisation Guidelines coming (no date yet) | Revised DPO Guidelines due Q2 2026 | IAB Europe TC String 🇧🇪 national ruling due 19 March | New Support Pool of Experts report: AI bias and data subjects’ rights.
No big news - summary of their AI models Opinion discussion (where, interestingly, one EU member voted against adoption). You can safely skip this update.
2025 report ready | 2026 topic: 📝 transparency & information | The EDPB created the CEF initiative under its 2021-2023 Strategy to enhance enforcement and strengthen cooperation among DPAs. Each year, they collectively choose a priority enforcement topic for coordinated (voluntary) action.
EDPB sets up an AI enforcement task force with a "quick response team" and adopts recommendations for WADA's 2027 World Anti-Doping Code, along with a statement on age assurance.
💡 EDPB members intervene to block new social media guidelines, arguing they interpret joint controllership too broadly and overlook practical consequences and balance against other fundamental rights. Little other news.
A must-read if the subject matter is relevant. Yes, legitimate interest can apply in the context of AI models—but your documentation needs to be thorough. And don’t forget to involve your DPO.
30 DPAs participated in EDPB's 2024 CEF action on the Right of access, involving 1185 controllers. 7 identified challenges like lack of documented procedures and requesting excessive ID docs. And more awareness is needed.
Never-before discussed 'Guidelines on the use of biometrics for physical access control' enter the spotlight! And "first complaint under the DPF redress mechanism"..? Here's the latest EDPB meeting minutes.
EDPB Chair Anu Talus writes the Commissioner for Justice on the Commission's review of 11 adequacy decisions adopted under Directive 95/46/EC for: Andorra, Argentina, Canada, Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland, and Uruguay. And isn't entirely happy.