EDPB publishes Guidelines on the Concepts of Controller and Processor in the GDPR

The European Data Protection Board (“EDPB”) has published draft guidelines on the concepts of controller and processor for public consultation. While its predecessor – the Article 29 Working Party – had issued guidance on the concepts of controller/processor (Opinion 1/2010, WP169) back in 2010, many practical concerns have been raised since the entry into force […]

The post EDPB publishes draft guidelines on the concepts of controller and processor appeared first on Alston & Bird Privacy Blog.

Background On April 4th, 2023, the European Data Protection Board (‘EDPB’), which is composed of representatives of the EU national supervisory authorities and the European Data Protection Supervisor (‘EDPS’), published an updated version of the Working Party 29 Guidelines on personal data breach notification under the EU General Data Protection Regulation (‘GDPR’). The EDPB had […]

The post EU Supervisory Authorities Clarify Breach Notification Requirements appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

A legal update on privacy, data security, and all things cyber by the attorneys of Alston & Bird.

Keep up with what’s happening in privacy, data security, and all things cyber – from HHS and FTC expanding cybersecurity divisions to the NAIC’s model privacy law to China’s standard contractual clauses – from our Privacy, Cyber & Data Strategy Group.

On May 16, 2022, the European Data Protection Board (‘EDPB’) published draft regulatory guidelines (‘draft guidance’) on the calculation of administrative fines for infringements of the EU General Data Protection Regulation (‘GDPR’). In the draft guidance, the EDPB sets out its methodology, consisting of five steps, for calculating administrative fines. The EDPB adopted these guidelines […]

The post EDPB Issues Draft Guidelines on the Calculation of Administrative Fines appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.