The European Data Protection Board (EDPB) adopted at its recent meeting in Brussels, on October 9, an opinion on the obligations of processors and sub-processors, guidelines on legitimate interests, a statement on the retention of personal data, procedures for the enforcement of Regulation (EU) 2016/679 as well as the Council’s work plan for 2024-2025.
The opinion concerns, among other things, agreements between responsible and processing parties and the interpretation of certain obligations of responsible, processing and sub-processing parties when processing personal information.
The council also approved new guidelines for the processing of personal information based on legitimate interests, cf. point f, paragraph 1 Article 6 of the regulation. When preparing the guidelines, the recent decision of the European Court of Justice from October 4, 2024 in case no. C-621/22. The guidelines specifically discuss the interest assessment that the provision stipulates and how it should be carried out in different situations when processing personal data.
The Council also approved a statement on the enforcement of the Personal Protection Regulation, a uniform procedure for conciliation in key cases and increased cooperation between the authorities.
See the EDPB’s press release here (English) for more details .