Monday, April 10, 2017
Working Party Issues GDPR Guidance
In early April, the Article 29 Working Party issued finalized versions of three documents providing guidelines to organizations on the proper interpretation of key topics in the General Data Protection Regulation, which will come into effect on May 25, 2018. The guidelines cover the right to data portability, Data Protection Officers, and the lead supervisory authority. In addition, the Working Party launched a public consultation, running through May 23, on draft guidance on data protection impact assessments and determining whether processing is “likely to result in a high risk.” According to its 2017 GDPR Action Plan, issued in January, the Working Party will also complete work underway on administrative fines, setting up the European Data Protection Board (EDPB), the one stop shop and the EDPB consistency mechanism. Other topics to be addressed in 2017 include consent and profiling, transparency, data transfers to third countries and data breach notifications.