On September 26, 2018, the European Data Protection Board (EDPB) met for their third plenary session.
During such session the EDPB adopted Guidelines on the GDPR’s Territorial Scope. The guidelines will be subject to a public consultation. The Guidelines aim at clarifying the territorial scope of the GDPR, in particular where the data controller or processor is established outside of the EU.
In addition, the plenary meeting:
- discussed the EU-Japan draft adequacy decision;
- adopted opinions on the draft lists that several supervisory authorities issued regarding the processing operations subject to the requirement of a data protection impact assessment (DPIAs, according to Article 35.4 GDPR). See here;
- adopted an opinion on the new E-evidence regulation, proposed by the European Commission in April 2018. See here.
The press release concerning the EDPB third plenary session is available at https://edpb.europa.eu…
Originally published on Technethics on October 2018