European Union
Commission publishes its adequacy decision pursuant to Art. 45 of the GPDR for the transfer of personal data from the EU to the Republic of Korea
You can read the press release here and the decision here.
EDPB adopts statement on its guidelines
The EDPB adopted, on 16 December 2021, a statement on cooperation on the elaboration of guidelines.
According to the EDPB, its guidelines and recommendations, although not binding in themselves, reflect the common position and understanding which the authorities agree to apply in a consistent way.
You can read the statement here.
EDPB adopts Guidelines on examples regarding data breach notification
The EDPB announced, on 15 December 2021, that it had adopted a final version of its Guidelines 01/2021 on examples regarding data breach notification.
These guidelines complement the Article 29 Working Party’s guidance on data breach notification by introducing more practice orientated guidance and recommendations.
It aims to help data controllers in deciding how to handle data breaches and what factors to consider during risk assessment.
You can read the press release here.
Parliament committee adopts position on DSA proposal
The European Parliament announced, on 14 December 2021, that the Internal Market and Consumer Protection Committee had adopted, on the same day, its position on the draft Digital Services Act.
The draft DSA will outline clear responsibility and accountability obligations for providers of intermediary services, in particular online platforms.
The Parliament plenary will vote on the amended draft DSA in the January session.
The approved text will become the Parliament’s mandate for negotiations with EU governments, which are planned to begin in the first semester of 2022.
You can read the press release here.
National Authorities
Belgium : DPA publishes recommendations on the processing of biometric data
The Belgian DPA published, on 6 December 2021, its recommendations on the processing of biometric data, following a public consultation.
The recommendations cover principles relevant to biometrics and data protection, as well as the manner in which such principles apply to the processing of biometric data.
You can read the recommendations in French here and in Dutch here.
Germany : LfD Sachsen-Anhalt publishes guide for SMEs
The Sachsen-Anhalt data protection authority announced, on 15 December 2021, the publication of a guide addressed to SMEs.
The LfD Sachsen-Anhalt had received numerous enquiries from SMEs on how to comply with data protection law, and, accordingly had issued a guide summarising basic information, and provided samples and working aids.
You can read the guide here, only available in German.
