EDPB

EDPB resolves dispute on transfers by Meta and creates task force on Chat GPT

Retrieved on: 
月曜日, 4月 17, 2023
FAQ, Compliance, OpenAI, GDPR, EDPB, IE, Dutch Data Protection Authority, ChatGPT, Meta, LSA, DPA, Medical device, Art

The binding decision addresses important legal questions arising from the draft decision of the Irish DPA as lead supervisory authority (LSA) regarding Meta IE.

Key Points: 
  • The binding decision addresses important legal questions arising from the draft decision of the Irish DPA as lead supervisory authority (LSA) regarding Meta IE.
  • The EDPB binding decision plays a key role in ensuring the correct and consistent application of the GDPR by the national Data Protection Authorities.
  • The EDPB members discussed the recent enforcement action undertaken by the Italian data protection authority against Open AI about the Chat GPT service.
  • The EDPB decided to launch a dedicated task force to foster cooperation and to exchange information on possible enforcement actions conducted by data protection authorities.

EDPB adopts final version of Guidelines on data subject rights - right of access

Retrieved on: 
月曜日, 4月 17, 2023
DPA, EEA, GDPR, EDPB, Art, Guideline, Feedback

Following public consultation, the EDPB has adopted a final version of the Guidelines on data subject rights - Right of access.

Key Points: 
  • Following public consultation, the EDPB has adopted a final version of the Guidelines on data subject rights - Right of access.
  • The Guidelines analyse the various aspects of the right of access and provide more precise guidance on how the right of access has to be implemented in different situations.
  • Among others, the Guidelines provide clarifications on the scope of the right of access, the information the controller has to provide to the data subject, the format of the access request, the main modalities for providing access, and the notion of manifestly unfounded or excessive requests.
  • In addition, the EDPB also adopted final versions of the targeted updates of Guidelines for identifying a controller or processor’s lead supervisory authority and the Guidelines on data breach notification.

Launch of the 2022 Annual Activity Report of the EDPB

Retrieved on: 
月曜日, 4月 17, 2023
EEA, European Data Protection Board, EDPB, European Economic Area, Retail, Cryptocurrency

Today, the European Data Protection Board (EDPB) presents its 2022 Annual Activity Report.

Key Points: 
  • Today, the European Data Protection Board (EDPB) presents its 2022 Annual Activity Report.
  • “This Report clearly demonstrates how much work is done by the EDPB in the span of a year, in terms of issuing guidance, consistency documents, legal advice and adopting binding decisions.
  • The role of the EDPB has changed substantially since 2018.
  • We do not just ensure that data protection law is applied consistently across the EEA, but help shape Europe’s digital future,” said Andrea Jelinek, Chair of the EDPB.

Let’s Look at LLMs: Understanding Data Flows and Risks in the Workplace

Retrieved on: 
金曜日, 3月 31, 2023
Workforce, Review, School, Technology, LLM, Intellectual property, Music, Employment, The Full Sentence, European Parliament, Civil service commission, Marketing, Speech, Internet, European, Workplace, Solution, DALL-E, Artificial Intelligence Act, General Data Protection Regulation, Disclosure, ChatGPT, EU Council, Ownership, Data economy, Facial recognition, EDPB, Research, Lawyer, OpenAI, Privacy, Confidentiality, Organization, European Data Protection Board, Student, European Commission, Decision-making, Patient, Compliance, Risk, Media, Berkeley, Translation, Misinformation, GDPR, AI, Empathy, Bias, Roger Hawkins (drummer), News, Television, Customer service, Medical device, Sales, Cryptocurrency, EU
Key Points: 

Launch of coordinated enforcement on role of data protection officers

Retrieved on: 
土曜日, 3月 18, 2023
SI, EEA, DPO, EDPB, FI, PT, CEF, EDPS, DPA, ES, European Data Protection Board, DE, Public sector, CZ, National data protection authority, Art, HR, Compliance, GDPR, Cryptocurrency, Satellite navigation device, EU

Brussels, 15 March - The European Data Protection Board has kicked off its 2023 coordinated enforcement action.

Key Points: 
  • Brussels, 15 March - The European Data Protection Board has kicked off its 2023 coordinated enforcement action.
  • Throughout the year, 26 Data Protection Authorities (DPA) across the EEA (including EDPS) will take part in the CEF 2023 on the designation and position of data protection officers (DPOs).
  • As intermediaries between DPAs, individuals and the business units of an organisation, data protection officers have an essential role in contributing to compliance with data protection law and promoting effective protection of data subject rights.
  • CEF initiatives aim to streamline enforcement and cooperation among Data Protection Authorities (DPAs).

EDPB welcomes improvements under the EU-U.S. Data Privacy Framework, but concerns remain

Retrieved on: 
火曜日, 2月 28, 2023
Shield, Privacy, Civil service commission, Intelligence, Privacy and Civil Liberties Oversight Board, Compliance, Data Protection Review Court, United States Foreign Intelligence Surveillance Court, Collection, Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2008, FISA, PCLOB, EU–US Privacy Shield, Schrems, Legislation, Government, Privacy Office of the U.S. Department of Homeland Security, U.S. Department of Commerce Office of Security, DPRC, Commission, EO, EDPB, DPF, European Commission, Max Schrems, Commerce, Adoption, CJEU, Review, Medical device, Principle, EU
Key Points: 

Alcon Reports Fourth Quarter and Full Year 2022 Results

Retrieved on: 
月曜日, 2月 27, 2023
Medical Supplies, Medical Devices, Health, General Health, Pharmaceutical, Optical, Certification, Information privacy, EDPB, DPA, Accreditation, EU, National data protection authority, Internal, Audit

During its February plenary, the EDPB adopted a procedure for the adoption of EDPB Opinions on national criteria for certification and European Data Protection Seals. This document is addressed to all applicants of certification criteria and aims to streamline and facilitate the adoption of EDPB Opinions on certification criteria by clarifying the approval process of national and EU-wide certification criteria, as well as criteria for certification meant as tools for international transfers.

Key Points: 

<p>During its February plenary, the <a href="https://edpb.europa.eu/our-work-tools/our-documents/procedure/edpb-docum... adopted a procedure for the adoption of EDPB Opinions on national criteria for certification and European Data Protection Seals</a>. This document is addressed to all applicants of certification criteria and aims to streamline and facilitate the adoption of EDPB Opinions on certification criteria by clarifying the approval process of national and EU-wide certification criteria, as well as criteria for certification meant as tools for international transfers.</p>
<p>More precisely, this document introduces all the steps that the Data Protection Authorities (DPAs) need to take from the moment they receive the criteria from the scheme owners to the moment they communicate to the EDPB Chair whether they intend to follow the EDPB Opinion.</p>
<p>This document will supersede <a href="https://edpb.europa.eu/our-work-tools/our-documents/internal-documents/i... Document 04/2019 on the procedure for the adoption of the EDPB Opinions on the DPA’s draft accreditation requirements for certification bodies and the DPA’s draft decisions on criteria of certification</a> (the parts related to the procedure for the adoption of opinions on accreditation requirements will remain valid). It will also supersede the <a href="https://edpb.europa.eu/our-work-tools/our-documents/procedure/edpb-docum... document on the procedure for the approval of certification criteria by the EDPB resulting in a common certification, the European Data Protection Seal</a>.</p>

EDPB publishes a procedure for the adoption of EDPB Opinions on national criteria for certification and European Data Protection Seals

Retrieved on: 
月曜日, 2月 27, 2023
Certification, Information privacy, EDPB, DPA, Adoption, Accreditation, EU, National data protection authority, Internal, Audit

During its February plenary, the EDPB adopted a procedure for the adoption of EDPB Opinions on national criteria for certification and European Data Protection Seals.

Key Points: 
  • During its February plenary, the EDPB adopted a procedure for the adoption of EDPB Opinions on national criteria for certification and European Data Protection Seals.
  • This document is addressed to all applicants of certification criteria and aims to streamline and facilitate the adoption of EDPB Opinions on certification criteria by clarifying the approval process of national and EU-wide certification criteria, as well as criteria for certification meant as tools for international transfers.
  • This document will supersede Internal Document 04/2019 on the procedure for the adoption of the EDPB Opinions on the DPA’s draft accreditation requirements for certification bodies and the DPA’s draft decisions on criteria of certification (the parts related to the procedure for the adoption of opinions on accreditation requirements will remain valid).
  • It will also supersede the EDPB document on the procedure for the approval of certification criteria by the EDPB resulting in a common certification, the European Data Protection Seal.

Boosting enforcement and cooperation - EDPB sets out priorities

Retrieved on: 
日曜日, 2月 26, 2023
EDPB, DPA, GDPR, Social media, Artificial Intelligence Act, Art, Compliance, Medical device, EU

The EDPB has adopted its new work programme, setting out its priorities and putting the Board’s strategic objectives into practice.

Key Points: 
  • The EDPB has adopted its new work programme, setting out its priorities and putting the Board’s strategic objectives into practice.
  • The EDPB will continue to prioritise enforcement building on initiatives such as the Coordinated Enforcement Framework, cases of strategic importance, and the Support Pool of Experts.
  • Among others, the EDPB will continue to ensure consistency of decisions by national DPAs via binding decisions under Art.
  • In addition, the EDPB will provide further guidance and develop awareness-raising tools on the GDPR for a wider audience.

EDPB publishes three guidelines following public consultation

Retrieved on: 
日曜日, 2月 26, 2023
Certification, Collection, Guideline, EDPB, Social media, Chapter Five, GDPR, Interplay, Medical device, Art

Following public consultation, the EDPB has adopted three sets of guidelines in their final version:

Key Points: 
  • Following public consultation, the EDPB has adopted three sets of guidelines in their final version:
    - Guidelines on the Interplay between the application of Art.
  • Following public consultation, the guidelines were updated and further clarifications were added.
  • Following public consultation, the Guidelines were updated to reflect comments received.
  • Following public consultation, the final version integrates updated wording and further clarifications in order to address comments and feedback received.