Tuesday, December 27, 2016
Working Party Issues Guidance on GDPR Implementation
Following a plenary meeting in mid-December, the Article 29 Working Party released guidelines and FAQs on three major implementation topics under the General Data Protection Regulation: the right to data portability, Data Protection Officers, and the lead supervisory authority (“one-stop-shop”). The 61 pages of guidance need to be closely analyzed by companies preparing for the May 2018 effective date of the GDPR. The WP29 invited comments on the guidance from stakeholders through the end of January 2017, suggesting that they were open to further refinements. Additional guidance, on data protection impact assessments and on certification, is scheduled for release in 2017. The Working Party also indicated that it is working on steps necessary to establish the European Data Protection Board called for by the GDPR, and announced that it will take on the role of the “EU centralized body” referenced in the Privacy Shield framework as the EU complaint-handling entity.