CEDPO
The Confederation of European Data Protection Organisations

CEDPO
The Confederation of European Data Protection Organisations

CEDPO aims to

  • promote the role of the Data Protection Officer,
  • provide advice on balanced, practicable and effective data protection, and to
  • contribute to a better harmonisation of data protection law and practices in the EU/EEA.

 

CEDPO members are convinced that the Data Protection Officer (DPO) plays a central role in enabling a balanced, practicable and effective protection of personal data. By gathering  organisations from different EEA Member States under one Confederation, we intend to contribute to a better harmonisation of rules and practices through the exchange of practical know-how and experiences.

Recent News

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

The interplay between the AI Act and the GDPR and its likely impact on data protection regulation, and, in particular, how it will affect the role of the data protection officer. In general terms, CEDPO has some concerns about the numerous legislative initiatives that the EU is enacting under the umbrella of its Data Strategy, and, specifically, how these new laws will interface with the role...

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

Recital 45(a) of the proposed draft AI Act broadly outlines the intended way in which the GDPR and the AI Act will interact with each other: “The right to privacy and to data protection must be guaranteed throughout the entire lifecycle of the AI system. In this regard, the principles of data minimisation and data protection by design and by default, as set out in Union data protection laws, are...

Data protection – design mandate in the age of digitalisation

Data protection – design mandate in the age of digitalisation

The German Association for Data Protection and Data Security (GDD) held its 46th Data Protection Symposium (DAFTA) from 17 to 18 November 2022. After purely virtual events in the last two years, the event was traditionally held again in the Maternushaus in Cologne. The political discussion as well as all forums were additionally transmitted via the internet. Prof. Dr. Rolf Schwartmann, Chairman...

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

The interplay between the AI Act and the GDPR and its likely impact on data protection regulation, and, in particular, how it will affect the role of the data protection officer. In general terms, CEDPO has some concerns about the numerous legislative initiatives that the EU is enacting under the umbrella of its Data Strategy, and, specifically, how these new laws will interface with the role...

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

Recital 45(a) of the proposed draft AI Act broadly outlines the intended way in which the GDPR and the AI Act will interact with each other: “The right to privacy and to data protection must be guaranteed throughout the entire lifecycle of the AI system. In this regard, the principles of data minimisation and data protection by design and by default, as set out in Union data protection laws, are...

Data protection – design mandate in the age of digitalisation

Data protection – design mandate in the age of digitalisation

The German Association for Data Protection and Data Security (GDD) held its 46th Data Protection Symposium (DAFTA) from 17 to 18 November 2022. After purely virtual events in the last two years, the event was traditionally held again in the Maternushaus in Cologne. The political discussion as well as all forums were additionally transmitted via the internet. Prof. Dr. Rolf Schwartmann, Chairman...

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

Where the Machines Meet the Data: The AI Act and its Implications for the GDPR

The interplay between the AI Act and the GDPR and its likely impact on data protection regulation, and, in particular, how it will affect the role of the data protection officer. In general terms, CEDPO has some concerns about the numerous legislative initiatives that the EU is enacting under the umbrella of its Data Strategy, and, specifically, how these new laws will interface with the role...

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

CEDPO Opinion on the potential impact of the EU’s proposed Artificial Intelligence Act (A.I. Act) on the role of the data protection officer

Recital 45(a) of the proposed draft AI Act broadly outlines the intended way in which the GDPR and the AI Act will interact with each other: “The right to privacy and to data protection must be guaranteed throughout the entire lifecycle of the AI system. In this regard, the principles of data minimisation and data protection by design and by default, as set out in Union data protection laws, are...

Data protection – design mandate in the age of digitalisation

Data protection – design mandate in the age of digitalisation

The German Association for Data Protection and Data Security (GDD) held its 46th Data Protection Symposium (DAFTA) from 17 to 18 November 2022. After purely virtual events in the last two years, the event was traditionally held again in the Maternushaus in Cologne. The political discussion as well as all forums were additionally transmitted via the internet. Prof. Dr. Rolf Schwartmann, Chairman...

Founding History

About CEDPO

CEDPO was founded in September 2011 by European Data Protection Organisations, namely, AFCDP (Association Française des Correspondants à la Protection des Données à Caractère Personnel) of France, APEP (Asociación Profesional Española de Privacidad) of Spain, GDD (Gesellschaft für Datenschutz und Datensicherheit) of Germany, and NGFG (Nederlands Genootschap van Functionarissen voor de Gegevensbescherming) of the Netherlands. In February 2014, ADPO (The Association of Data Protection Officers) of Ireland, ARGE DATEN of Austria, and SABI (Stowarzyszenie Inspektorów Ochrony Danych) of Poland joined CEDPO. 

The latest to additions to CEDPO took place between 2018-2020 when ASSO DPO (Associazione Data Protection Officer) of Italy, AEPD (Associação de Encarregados de Proteção de Dados) of Portugal and ASCPD (Asociatia Specialistilor in Confidentialitate si Protectia Datelor) of Romania became member associations.

CEDPO Members

Austria | ARGE Daten
France | AFCDP
Germany | GDD
Ireland | ADPO
Italy | ASSO DPO
The Netherlands | NGFG
Poland | SABI

Romania | ASCPD

Portugal | AEPD

Spain | APEP

Austria | ARGE Daten

France | AFCDP
Germany | GDD
Ireland | ADPO
Italy | ASSO DPO
The Netherlands | NGFG
Poland | SABI
Rumania | ASCPD
Spain | AEPD
Spain | APEP