Who We Are

Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications

25th February 2020

The European Data Protection Board (EDPB) welcomes comments on the Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications. Comments should be sent to the EDPB by April 6th 2020 at the latest. ...

Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies

25th February 2020

The European Data Protection Board (EDPB) welcomes comments on the Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies. Comments should be sent to the EDPB by April 6th 2020 at the latest. ...

Data Protection and Brexit – Frequently Asked Questions

09th February 2020

Brexit, particularly in the context of a ‘No Deal’ scenario, may have a serious impact on the data protection obligations of Irish controllers which transfer personal data to the UK (including Northern Ireland); because, in a situation where the UK becomes a ‘third country’, transfers to the UK will be considered transfers outside of the EU/EEA and will require a mechanism to ensure an adequate ...

Operationalising accountability through Codes of Conduct and Certification

07th February 2020

Accountability - GDPR Article 5.2… “The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 [the principles of data protection]” As one of the GDPR’s most important innovations, the principle of accountability (Article 5.2 in the GDPR) means that organisations processing personal data must: ...

Data Protection Commission launches Statutory Inquiry into MTCH Technology Services Limited (Tinder)

04th February 2020

Since the GDPR came into effect, the Data Protection Commission has been actively monitoring complaints received from individuals in order to identify thematic and possible systemic data protection issues. A number of issues have been identified from concerns raised by individuals both in Ireland and across the EU. ...