EDPB Issues Draft Guidelines on the Calculation of Administrative Fines

Background On April 4th, 2023, the European Data Protection Board (‘EDPB’), which is composed of representatives of the EU national supervisory authorities and the European Data Protection Supervisor (‘EDPS’), published an updated version of the Working Party 29 Guidelines on personal data breach notification under the EU General Data Protection Regulation (‘GDPR’). The EDPB had […]

The post EU Supervisory Authorities Clarify Breach Notification Requirements appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

On January 28, 2022, the European Data Protection Board (“EDPB”) published draft regulatory guidelines (“draft guidance”) on the right of data subjects to have access to their personal data under the EU General Data Protection Regulation (“GDPR”). In the draft guidance, the EDPB explains the aim and components of the right. This analysis is followed […]

The post EDPB Issues Draft Guidelines on Data Subject Access Rights appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

On November 18, the European Data Protection Board (“EDPB”) released draft guidelines on the interplay between Article 3 GDPR – which sets out the GDPR’s territorial scope – and the provisions in Chapter V of the GDPR, which impose restrictions on international data transfers.  In this draft guidance, the EDPB clarifies which (cumulative) criteria must […]

The post EDPB issues draft guidelines on the interplay between the GDPR’s provisions on territorial scope and international data transfers appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

Earlier this month, the European Data Protection Board (EDPB) published a report on the resources that the EU Member States make available to their Data Protection Authorities (DPA) and on the enforcement actions initiated by those DPAs. Resources made available by the EU Member States to the DPAs The EDPB report releases statistics on both […]

The post EDPB reports on EU Data Protection Authorities’ resources and enforcement actions appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

On July 7th, the European Data Protection Board (“EDPB”) adopted its finalized guidelines on the concepts of controller and processor in the General Data Protection Regulation (“GDPR”). While the EDPB’s predecessor – the Article 29 Working Party – had issued guidance on the concepts of controller/processor (Opinion 1/2010, WP169) back in 2010, many practical concerns […]

The post EDPB publishes Guidelines on the Concepts of Controller and Processor in the GDPR appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.