(Data Protection News & Services)
During this 37th plenary session, the Board adopted Guidelines on the concepts of controller and processor and Guidelines on the targeting of social media users. The EDPB also created a taskforce focusing complaints following the CJEU Schrems II judgement and
The final version of the standard contractual clauses (SCCs) for contracts between controller and processor submitted by the Danish Supervisory Authority has been published in the European Data Protection Board (EDPB) Register for Decisions.
They have been adopted by the Danish Supervisory Authority under article 28(8) GDPR allowing the Supervisory Authority to adopt standard processor agreements.
Under the General Data Protection Regulation (GDPR), any person (including organisations) handling personal data is subject to a different level of obligations and responsibilities with regard to the personal data processing operations they carry out depending on whether they are acting as a processor, a controller or a joint controller.
Indeed, all their GDPR obligations and responsibilities stem from their role and may, as a result, differ greatly. In broad words, controllers bear most responsibilities while processors must only act under the instructions of the controller and therefore, bear much less responsibility on its shoulders.
The GDPR at a Glance A better understanding of the EU General Data Protection Regulation (GDPR) (Click on the icons below or scroll down the page and find the article you’re looking for) Introduction The main concepts to understand the