home.social

#edpb — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #edpb, aggregated by home.social.

  1. Tracking Pixels in Email: The Italian DPA Guidelines and the Consent Puzzle

    A commentary on Decision No. 284 of April 17, 2026, by the Italian Data Protection Authority. Two systemic questions: privacy by design under Art. 25 GDPR, and consent specificity under EDPB Guidelines 05/2020.

    🇬🇧 nicfab.eu/en/posts/tracking-pi
    🇮🇹 nicfab.eu/it/posts/tracking-pi

    Newsletter: nicfab.eu/en/pages/newsletter/

  2. @privacypratica
    L’Autorità ha accertato che il “FaceBoarding” è in contrasto con il parere dell’ #EDPB sull’uso del riconoscimento facciale in aeroporto, per dati biometrici conservati in maniera centralizzata nei server di #SEA impedendo ai passeggeri di esercitare un controllo esclusivo.
    Riscontrata inoltre carenza di misure di cifratura dei modelli biometrici e acquisizione senza consenso delle immagini del volto dei passeggeri non aderenti al FaceBoarding che utilizzavano i varchi ibridi.

  3. The EDPB has published a harmonized DPIA template — the first pan-European documentary standard for impact assessments. Open for public consultation until 9 June.
    Key insight: a clear separation between design risk (processing works as intended but still poses risks) and incident risk (breaches, attacks, misconfigurations).
    The design choices are the risk, before any failure occurs.
    Full analysis:
    nicfab.eu/en/posts/edpb-dpia-t

  4. The European Data Protection Board (EDPB) has published its 2025 Annual Report. The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the Helsinki Statement on Enhanced Clarity, Support, and Engagement.
    edpb.europa.eu/news/news/2026/
    #GDPR #EDPB

  5. The European Data Protection Board (EDPB) has published its 2025 Annual Report. The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the Helsinki Statement on Enhanced Clarity, Support, and Engagement.
    edpb.europa.eu/news/news/2026/
    #GDPR #EDPB

  6. An unusual situation: the regulator is investing in infrastructure for a framework that the legislature may be in the process of dismantling parts of. The EDPB Work Programme 2026–2027 and the Digital Omnibus: Is GDPR Quietly Shifting? #GDPR #EDPB #privacy #UK #europe privacyinsightsolutions.com/bl

  7. At least there was one good #privacy move by EU regulators last week:

    Europe’s privacy regulators have “significant concerns” about #Washington’s plans to hoover up more data about European travelers, they said in a letter sent to the @EUCommission this week.

    The #EDPB asked the Commission if it plans to “take any action” over a US proposal to review Europeans’ social media and #PersonalData when they apply for #visa-free travel to the US.

    edpb.europa.eu/system/files/20

  8. 📃🚌 We have just published the third version of our report on the #DigitalOmnibus, which now also includes comments on the joint statement issued by the #EDPB and the #EDPS on 11 February 2026.

    Read the report here 👉 noyb.eu/en/digital-omnibus-rep

  9. 📃🚌 We have just published the third version of our report on the #DigitalOmnibus, which now also includes comments on the joint statement issued by the #EDPB and the #EDPS on 11 February 2026.

    Read the report here 👉 noyb.eu/en/digital-omnibus-rep

  10. 📃🚌 We have just published the third version of our report on the #DigitalOmnibus, which now also includes comments on the joint statement issued by the #EDPB and the #EDPS on 11 February 2026.

    Read the report here 👉 noyb.eu/en/digital-omnibus-rep

  11. 📃🚌 We have just published the third version of our report on the #DigitalOmnibus, which now also includes comments on the joint statement issued by the #EDPB and the #EDPS on 11 February 2026.

    Read the report here 👉 noyb.eu/en/digital-omnibus-rep

  12. 📃🚌 We have just published the third version of our report on the #DigitalOmnibus, which now also includes comments on the joint statement issued by the #EDPB and the #EDPS on 11 February 2026.

    Read the report here 👉 noyb.eu/en/digital-omnibus-rep

  13. @datenschutz_nds hat in einer Stichprobe zehn Unternehmen und zehn Behörden in Niedersachsen zu ihrem Umgang mit dem Recht auf Löschung (Art. 17 DSGVO) geprüft.

    Die Prüfung war Teil des Coordinated Enforcement Frameworks (CEF) des Europäischen Datenschutzausschusses.

    Zu den Ergebnissen und dem Abschneiden #Niedersachsen |s, unsere PM 👉 lfd.niedersachsen.de/startseit

    #datenschutz #teamdatenschutz #dsGVO #edpb

    /team

  14. Heute in der #DatenschutzWoche:

    🇪🇺 Am 11.02.2026 haben @EDPS und #EDPB eine gemeinsame Stellungnahme zum #DigitalOmnibus veröffentlicht.

    🏛️EuGH: Verbindliche Beschlüsse des EDSA sind gemäß Art. 65 DSGVO vor EU-Gerichten anfechtbar.

    Plus: Aktuelle Gerichtsentscheidungen & Neues aus den Aufsichtsbehörden: sds-links.de/DSW217

    📨 Immer montags, auch per E-Mail: sds-links.de/Anmeldung-Datensc

    #TeamDatenschutz

  15. 💬 Max Schrems: “[The #EDPB and the #EDPS] have called out key changes for what they are: neither ‘technical’ changes nor ‘simplification,’ but limitations of the right to data protection for #EU residents.” 🇪🇺 #DigitalOmnibus

    Read more 👉 cybernews.com/privacy/europe-r

  16. 💬 Max Schrems: “[The #EDPB and the #EDPS] have called out key changes for what they are: neither ‘technical’ changes nor ‘simplification,’ but limitations of the right to data protection for #EU residents.” 🇪🇺 #DigitalOmnibus

    Read more 👉 cybernews.com/privacy/europe-r

  17. 💬 Max Schrems: “[The #EDPB and the #EDPS] have called out key changes for what they are: neither ‘technical’ changes nor ‘simplification,’ but limitations of the right to data protection for #EU residents.” 🇪🇺 #DigitalOmnibus

    Read more 👉 cybernews.com/privacy/europe-r

  18. 💬 Max Schrems: “[The #EDPB and the #EDPS] have called out key changes for what they are: neither ‘technical’ changes nor ‘simplification,’ but limitations of the right to data protection for #EU residents.” 🇪🇺 #DigitalOmnibus

    Read more 👉 cybernews.com/privacy/europe-r

  19. 💬 Max Schrems: “[The #EDPB and the #EDPS] have called out key changes for what they are: neither ‘technical’ changes nor ‘simplification,’ but limitations of the right to data protection for #EU residents.” 🇪🇺 #DigitalOmnibus

    Read more 👉 cybernews.com/privacy/europe-r

  20. Der Europäische Datenschutzausschuss (EDPB) und der Europäische Datenschutzbeauftragte (EDSB) haben eine gemeinsame Stellungnahme zum Vorschlag für eine digitale Omnibusverordnung verabschiedet.
    edps.europa.eu/system/files/20
    #Datenschutz #Omnibus #DSGVO #GDPR #EDPB #EDPB

  21. @ulrichkelber @Kuchenschwarte

    Gerne retweeten. Der #EDSA (#EDPB) macht seine Sitzungsprotokolle mit Einblicke in die europäische Zusammenarbeit öffentlich. Hier relevant Punkt B 1.5 auf der 99. Sitzung.

    Für Fragen: edpb.europa.eu/about-edpb/cont

    Gerne boosten! ♻️

    Quelle: edpb.europa.eu/system/files/20 (englisch, Seite 3)

    #GDPR #Facebook #bfdi #datenschutz #fanpage #FBfanpage

  22. @ulrichkelber @Kuchenschwarte

    Gerne retweeten. Der #EDSA (#EDPB) macht seine Sitzungsprotokolle mit Einblicke in die europäische Zusammenarbeit öffentlich. Hier relevant Punkt B 1.5 auf der 99. Sitzung.

    Für Fragen: edpb.europa.eu/about-edpb/cont

    Gerne boosten! ♻️

    Quelle: edpb.europa.eu/system/files/20 (englisch, Seite 3)

    #GDPR #Facebook #bfdi #datenschutz #fanpage #FBfanpage

  23. @ulrichkelber @Kuchenschwarte

    Gerne retweeten. Der #EDSA (#EDPB) macht seine Sitzungsprotokolle mit Einblicke in die europäische Zusammenarbeit öffentlich. Hier relevant Punkt B 1.5 auf der 99. Sitzung.

    Für Fragen: edpb.europa.eu/about-edpb/cont

    Gerne boosten! ♻️

    Quelle: edpb.europa.eu/system/files/20 (englisch, Seite 3)

    #GDPR #Facebook #bfdi #datenschutz #fanpage #FBfanpage

  24. @ulrichkelber @Kuchenschwarte

    Gerne retweeten. Der #EDSA (#EDPB) macht seine Sitzungsprotokolle mit Einblicke in die europäische Zusammenarbeit öffentlich. Hier relevant Punkt B 1.5 auf der 99. Sitzung.

    Für Fragen: edpb.europa.eu/about-edpb/cont

    Gerne boosten! ♻️

    Quelle: edpb.europa.eu/system/files/20 (englisch, Seite 3)

    #GDPR #Facebook #bfdi #datenschutz #fanpage #FBfanpage

  25. @ulrichkelber @Kuchenschwarte

    Gerne retweeten. Der #EDSA (#EDPB) macht seine Sitzungsprotokolle mit Einblicke in die europäische Zusammenarbeit öffentlich. Hier relevant Punkt B 1.5 auf der 99. Sitzung.

    Für Fragen: edpb.europa.eu/about-edpb/cont

    Gerne boosten! ♻️

    Quelle: edpb.europa.eu/system/files/20 (englisch, Seite 3)

    #GDPR #Facebook #bfdi #datenschutz #fanpage #FBfanpage

  26. 📢 Neu im #DatenschutzArchiv!

    💡 Ab sofort findet Ihr dort nicht nur die Veröffentlichungen der Datenschutzkonferenz (@dsk), sondern auch die offiziellen Stellungnahmen und Leitlinien des Europäischen Datenschutzausschusses (#EDSA / engl. #EDPB)

    🔎 Jetzt reinschauen: datenschutzarchiv.org/organisa

    #TeamDatenschutz

  27. 📢 EDSA veröffentlicht Jahresbericht 2024 📢
    Er enthält eine Zusammenfassung der Aktivitäten des vergangenen Jahres und einen Überblick über:
    - die Anwendung der Leitlinien in der Praxis;
    - Empfehlungen und Berichte über bewährte Verfahren;
    - verbindlichen Beschlüsse;
    das Datenschutzniveau hinsichtlich natürlicher Personen in der EU und, falls relevant, in Drittstaaten und internationalen Organisationen.
    📑 EDPB Annual Report 2024: edpb.europa.eu/our-work-tools/
    #EDSA #EDPB #DSGVO #GDPR

  28. @data @datadon 🧵

    In its judgment, the General Court of the European Union strengthened the conciliation and regulatory powers of the European Data Protection Board.

    "The DPC will have to continue its investigations into Meta unless it chooses to refer the matter to the European Court of Justice. Given the timeline of the original investigation, which began in 2018, it may still take several years before a final determination is made regarding the GDPR compliance of Meta’s business model, particularly in relation to behavioural advertising."

    dpoblog.eu/cjeu-and-the-powers by Christina Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany)

    #advertising #GDPR #Meta #WhatsApp #instagram #CJEU #DPC #EDPB #Etteldorf #networkPolitics #targetedAdvertising #targetedAdvertisement #dataProtection #dataMining #dataDon #dataCapture #dataGovernance #retaliation

  29. @data @datadon 🧵

    In its judgment, the General Court of the European Union strengthened the conciliation and regulatory powers of the European Data Protection Board.

    "The DPC will have to continue its investigations into Meta unless it chooses to refer the matter to the European Court of Justice. Given the timeline of the original investigation, which began in 2018, it may still take several years before a final determination is made regarding the GDPR compliance of Meta’s business model, particularly in relation to behavioural advertising."

    dpoblog.eu/cjeu-and-the-powers by Christina Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany)

    #advertising #GDPR #Meta #WhatsApp #instagram #CJEU #DPC #EDPB #Etteldorf #networkPolitics #targetedAdvertising #targetedAdvertisement #dataProtection #dataMining #dataDon #dataCapture #dataGovernance #retaliation

  30. @[email protected] @[email protected] 🧵

    In its judgment, the General Court of the European Union strengthened the conciliation and regulatory powers of the European Data Protection Board.

    "The DPC will have to continue its investigations into Meta unless it chooses to refer the matter to the European Court of Justice. Given the timeline of the original investigation, which began in 2018, it may still take several years before a final determination is made regarding the GDPR compliance of Meta’s business model, particularly in relation to behavioural advertising."

    dpoblog.eu/cjeu-and-the-powers by Christina Etteldorf, Institut of European , Saarbrücken (Germany)

  31. @data @datadon 🧵

    In its judgment, the General Court of the European Union strengthened the conciliation and regulatory powers of the European Data Protection Board.

    "The DPC will have to continue its investigations into Meta unless it chooses to refer the matter to the European Court of Justice. Given the timeline of the original investigation, which began in 2018, it may still take several years before a final determination is made regarding the GDPR compliance of Meta’s business model, particularly in relation to behavioural advertising."

    dpoblog.eu/cjeu-and-the-powers by Christina Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany)

    #advertising #GDPR #Meta #WhatsApp #instagram #CJEU #DPC #EDPB #Etteldorf #networkPolitics #targetedAdvertising #targetedAdvertisement #dataProtection #dataMining #dataDon #dataCapture #dataGovernance #retaliation

  32. @data @datadon 🧵

    In its judgment, the General Court of the European Union strengthened the conciliation and regulatory powers of the European Data Protection Board.

    "The DPC will have to continue its investigations into Meta unless it chooses to refer the matter to the European Court of Justice. Given the timeline of the original investigation, which began in 2018, it may still take several years before a final determination is made regarding the GDPR compliance of Meta’s business model, particularly in relation to behavioural advertising."

    dpoblog.eu/cjeu-and-the-powers by Christina Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany)

    #advertising #GDPR #Meta #WhatsApp #instagram #CJEU #DPC #EDPB #Etteldorf #networkPolitics #targetedAdvertising #targetedAdvertisement #dataProtection #dataMining #dataDon #dataCapture #dataGovernance #retaliation

  33. 🇪🇺↔️🇺🇸 🕵🏽‍♀️

    #PCLOB is also instrumental in implementing an agreement between the U.S. and European Union that allows businesses to transfer Europeans' data to the United States.”

    The White House has requested that the three Democratic members of the Privacy and Civil Liberties Oversight Board (PCLOB) resign by end of day Thursday or face termination, a source close to the agency confirmed.

    axios.com/2025/01/22/white-hou

    #privacy #datatransfer #edpb #dataprivacyframework

  34. Nieuwe guidelines voor delen persoonsgegevens buiten EU

    In een snel digitaliserende wereld kunnen organisaties verzoeken krijgen van overheidsinstanties in andere landen om persoonsgegevens te delen. Denk aan het verzamelen van bewijs van een misdaad of het controleren van financiële transacties. De European Data Protection Board (EDPB) heeft de regels verduidelijkt voor het delen van persoonsgegevens met overheidsinstanties buiten de Europese Economische Ruimte (EER). Bij de EER horen alle EU-landen plus Liechtenstein, Noorwegen en IJsland. 

    Nieuwe guidelines

    Op het moment dat een Europese organisatie een verzoek krijgt van een instantie in een land buiten de EU moet de organisatie zich houden aan de Algemene verordening gegevensbescherming (AVG). De nieuwe guidelines van de EDPB helpen organisaties te bepalen of en hoe zij in zo’n situatie persoonsgegevens kunnen delen. De guidelines gaan specifiek in op verzoeken die ontstaan uit een gerechtelijke uitspraak of besluit. Je kunt tot en met 27 januari 2025 hierop reageren. Na deze consultatie stelt de EDPB de definitieve guidelines vast.

    Meer informatie staat op de website van de Autoriteit Persoonsgegevens (AP). De guidelines en de mogelijkheid om te reageren vind je op de website van de EDPB.

    Dit is een automatisch geplaatst bericht. Vragen of opmerkingen kun je richten aan @[email protected]

    #AutoriteitPersoonsgegevens #EDPB #EER #EU #EuropeanDataProtectionBoard #EuropeseEconomischeRuimte #persoonsgegevens #Privacy

  35. Michael #McGrath, designierter EU-Kommissar für Demokratie, Justiz u. Rechtsstaatlichkeit zu seiner #Datenschutz-Agenda:

    #GDPR and #DataProtection:
    > [T]he adoption of the Procedural Rules Regulation is going to be an important initiative and will help to ensure the… implementation of GDPR, particularly on a cross-border basis.

    > [A]t the end of this year, the #EDPB will adopt an opinion binding on the #DPAs regarding the processing of #PersonalData for… #AI models.

    hearings.elections.europa.eu/d

  36. 🇪🇺 #DataProtection Board's Statement on the 42 Recommendations of the »High-Level Group on Access to Data for Effective Law Enforcement« aka the #EuGoingDark surveillance plan:
    edpb.europa.eu/system/files/20

    > "The #EDPB, …, positively notes the intention expressed in the Recommendations to establish a harmonised EU regime on #DataRetention …"

    Nothing about the undemocratic and biased working methods of the group …

    #GoingDark #decryption #Vorratsdatenspeicherung #encryption #Privacy #TeamDatenschutz

  37. Neues Audit-Tool 🤖 des #EDSA für #Datenschutz-Behörden sowie für Verantwortliche und Auftragsverarbeiter, die ihre eigene Website testen wollen:
    👉 edpb.europa.eu/news/news/2024/

    Das Tool basiert auf Chrome und untersucht u. a. #Cookies, #SSL, Datenverkehr und #Tracking-Pixel (#beacons). Ob eine Website gesetzeskonform ist oder nicht, entscheiden die testenden Sachbearbeiter*innen.

    #TeamDatenschutz #AusDemDSBLeben #EDPB

    @lfdi @BayLfD @BlnBDI @HBDI @lfdi_rlp @sdtb
    @dsk @bfdi

  38. "Art. 36(3) #DMA explicitly states that the results of the independent audits on #profiling, should also serve to enforce the #GDPR. Accordingly, the Commission is obliged to forward the audit reports to the #EDPB."

    dpoblog.eu/dma-and-gdpr-a-boos by Christina #Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany) #dataProtection #dataMining #dataDon #dataCapture #dataGovernance @data @dataGovernance #networkPolitics

  39. "Art. 36(3) #DMA explicitly states that the results of the independent audits on #profiling, should also serve to enforce the #GDPR. Accordingly, the Commission is obliged to forward the audit reports to the #EDPB."

    dpoblog.eu/dma-and-gdpr-a-boos by Christina #Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany) #dataProtection #dataMining #dataDon #dataCapture #dataGovernance @data @dataGovernance #networkPolitics

  40. "Art. 36(3) explicitly states that the results of the independent audits on , should also serve to enforce the . Accordingly, the Commission is obliged to forward the audit reports to the ."

    dpoblog.eu/dma-and-gdpr-a-boos by Christina , Institut of European , Saarbrücken (Germany) @[email protected] @dataGovernance

  41. "Art. 36(3) #DMA explicitly states that the results of the independent audits on #profiling, should also serve to enforce the #GDPR. Accordingly, the Commission is obliged to forward the audit reports to the #EDPB."

    dpoblog.eu/dma-and-gdpr-a-boos by Christina #Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany) #dataProtection #dataMining #dataDon #dataCapture #dataGovernance @data @dataGovernance #networkPolitics

  42. "Art. 36(3) #DMA explicitly states that the results of the independent audits on #profiling, should also serve to enforce the #GDPR. Accordingly, the Commission is obliged to forward the audit reports to the #EDPB."

    dpoblog.eu/dma-and-gdpr-a-boos by Christina #Etteldorf, Institut of European #Media #Law, Saarbrücken (Germany) #dataProtection #dataMining #dataDon #dataCapture #dataGovernance @data @dataGovernance #networkPolitics

  43. Die neue #DatenschutzWoche is da:
    sds-links.de/DSW86

    Themen u.a.:
    ▫️ #EuGH zu #Schadensersatz, Recht auf #Kopie u. Rechtmäßigkeit v. Datenverarbeitungen nach #DSGVO
    ▫️ #Datatilsynet: Fragebogen (auf Dänisch) zur Prüfaktion zur Rolle von #DSB veröffentlicht
    ▫️ #EDPB: Kandidat:innen für Wahl d. (Co-)Vorsitzes am 25. Mai
    ▫️ VGH Bayern: Name u. Adresse keine bes. schutzbedürftigen bes. Kategorien personenbez. Daten
    ▫️ @BayLfD: Leitfaden „#Datenschutz als Kriterium im #Vergabeverfahren