EDPB Guidelines 2/2024 Article 48
paid
–
5 min read
Update 4 Jul: EDPB shared high-res diagram! Earlier: I've reviewed the final version – mostly clarifications and my annotations on the public consultation one are still valid | EDPB Guidelines on Article 48 covering official requests from third country public authorities for personal data transfers.
Sweden DPA IMY: DPIA practical guidance
paid
–
1 min read
IMY has shared a DPIA guide, primarily for those with little or no experience. It sets out a clear 10-step process for conducting an "acceptable" DPIA, to be used alone or with their templates. Grab the documents here (Swedish and DeepL translation).
EDPB Opinion 28/2024: AI models
paid
–
4 min read
A must-read if the subject matter is relevant. Yes, legitimate interest can apply in the context of AI models—but your documentation needs to be thorough. And don’t forget to involve your DPO.
🚨 EDPB shares Art. 48 Guidelines (PC) and new Data Protection Seal certification
paid
–
1 min read
The EDPB just shared new Guidelines! This time for Article 48 and they're on public consultation until 25 Jan 2025. They also announced a new EU Data Protection Seal certification for 'Brand Compliance'.
ICO approves first sector-owned UK GDPR Code of Conduct for private investigators
paid
–
1 min read
🇬🇧 ICO: "This code, which investigators in the private sector can sign up to, will provide certainty and reassurance to those using their services [and] assist investigators to navigate the challenges between conducting investigations whilst respecting people’s privacy rights."
EDPB Guidelines 1/2024 Legitimate interests (public consultation)
paid
–
4 min read
The EDPB's recent new legitimate interest guidelines are on public consultation until 20 Nov 2024. Initial analysis: 📝 Document, document, document.
EDPB Guidelines 2/2023 Technical Scope of Art. 5(3) ePrivacy Directive
paid
–
1 min read
Likely one of the EDPB’s most controversial documents to date, though the sub-processor Opinion will definitely give it strong competition for first place!
EDPB Guidelines 1/2022 Right of access
paid
–
3 min read
A snapshot of the EDPB Guidelines dealing with DSARs: Brief overview, key points, and some advice for data protection pros.
Dutch DPA on education sector social media marketing
paid
–
4 min read
The DPA stresses that their advice applies generally to all social media and "of great importance" to all educational institutions and similar organisations in 🇳🇱.
EDPB Guidelines 5/2020 Consent
paid
–
6 min read
A 1-page summary of the EDPB's Guidelines: structure of valid consent, when is it invalid, what to do when it's withdrawn, key highlights and resources.