News

In addition to SCCs for International Transfers, the EU Commission published the final version of the SCCs for data processing agreements under art. 28 GDPR for controllers and processors relationship.

The European Commission finally released the new version of the EU  Standard Contractual Clauses under the GDPR for data transfers from controllers or processors in the EU/EEA to controllers or processors established outside the EU/EEA.

Enforcement action has taken by the Dutch Data Protection Authority against online platform which provides the personal details of people around the world, including in the EU, for failure to comply with the requirement to appoint a Representative in the Union for privacy purposes under art. 27 of GDPR.

EDPB approved draft decision by the French Authority (CNIL) on code of conduct regarding the European Code of Conduct submitted by the Cloud Infrastructure Service Providers (‘CISPE’). The CISPE Code will contribute to the proper application of the GDPR considering the specific features of the cloud computing sector.

The European Data Protection Board through its Opinion highlighted that many aspects of the UK framework are essentially equivalent to the GDPR, however outlined a number of areas that should be further assessed and/or monitored by the Commission. You can check the opinion 14/2021 by clicking on the title of this post.  

On 30 March 2021, adequacy talks were concluded with South Korea. The European Commission will now proceed with launching the decision-making procedure to adopt the adequacy decision.

The Italian data protection authority fined the Ministry of Economic Development for failing to appoint a DPO within a specific deadline and for the unlawful publication of the CVs of 5,000 managers on its website.

The European Commission released a report on European Union Member States’ laws governing the processing of health data. It is quite clear from the report that regulatory complexity and a lack of legal certainty significantly hamper the use health data for valuable public health and scientific research initiatives in Europe. One element of a potential…

On 19 February 2021, the European Commission published UK draft adequacy decision under the General Data Protection Regulation and the Data Protection Directive with Respect to Law Enforcement. The draft adequacy decision will now be reviewed by the European Data Protection Board that will deliver its opinion to the Commission and EU Member States representatives,…

The European Data Protection Board provided its response to Commission with regard to health research issues. Some of the key points were about the legal basis for processing health data for scientific research, the further processing of previously collected health data, the notion of broad consent, transparency of data processing, anonymisation, pseudonymisation and safeguards, as…