CEDPO
NEWS
The Fediverse: what is it and how does it work?
Have you heard of the Fediverse? Not to be confused with the Metaverse, the Fediverse is a network of federated – interconnected - online resources using common communication protocols which allow their users to exchange information across different platforms. Federated resources (messaging, IOT, Games, VOIP, etc.) are mostly developed in open source and based on open standard...
Summary of EDPB Draft Guidelines 04/2022 on the calculation of administrative fines under the GDPR
The EDPB guidelines are intended to create a single harmonised methodology to be used by the supervisory authorities (SAs) when calculating the amount of a GDPR fine. The guidance also documents practical examples to facilitate organisations in their understanding of how the calculation method can be applied with consistency. The guidelines define a five-step methodology in support of...
French Ministry of Labour- Study on the profession of DPO
The profession of Data Protection Officer (DPO) is relatively new in many private or public organizations. The conditions of practice, the forms of employment, the career paths or skills held or expected for the exercise of the profession of DPO need to be well identified and understood in order to provide the right answers in terms of employment and professional training. The AFCDP has worked...
Lake Como CEDPO Statement
Lake Como CEDPO Statement CEDPO held its first in person board meeting of the post COVID pandemic era on the banks of Lake Como. The objectives of the meeting were (i) to discuss the current European data protection legislative landscape, (ii) take stock of member observations and activities, and (iii) define common priorities and objectives for the CEDPO work program of 2022-2023. There were a...
CEDPO issues opinion on EDPB’s Guidelines 01/2022
On January 18th the European Data Protection Board (EDPB) published Guidelines 01/2022 on the right of access under Article 15 of the GDPR. Access requests from data subjects and the obligations of data controllers to provide a copy of personal data are of great relevance for practice, but essential questions of detail regarding scope and extent are still unresolved. It is disputed, for example,...
CEDPO comments on Guidelines 05/2021
On November 18th, 2021, the European Data Protection Board (EDPB) published Guidelines 05/2021 which were supposed to clarify the definition of international personal data transfers. Since the GDPR does not include a legal definition of data transfer according to Art. 44, there are legal uncertainties for controllers and processors, especially when entering into processing agreements with...
