EDPB Publishes GDPR Personal Data Processing Notice for EU Institutions

• The European Data Protection Board (EDPB) has published a General Data Protection Notice outlining its processing activities.
• The notice is relevant for clients with interests in EU institutions' data handling practices, particularly those involved in GDPR compliance.
• The EDPB processes personal data in compliance with Regulation (EU) 2018/1725 and has a designated Data Protection Officer (DPO).
• Individuals have specific rights regarding their personal data held by the EDPB, outlined in Chapter III of Regulation 2018/1725.

The EDPB processes personal data in compliance with Regulation (EU) 2018/1725 and has a designated Data Protection Officer (DPO).

The European Data Protection Board (EDPB) has published a General Data Protection Notice outlining its processing activities. The notice is relevant for clients with interests in EU institutions' data handling practices, particularly those involved in GDPR compliance. According to the EDPB's Rules of Procedure, personal data is processed by the EDPB and its Secretariat in the context of their activities defined in Articles 70 and 75 of Regulation (EU) 2016/679 (GDPR). The processing is done in compliance with Regulation (EU) 2018/1725, applicable to EU institutions' data handling. The notice provides information on how personal data is processed on the EDPB's website and outlines specific rights for individuals regarding their personal data held by the EDPB.

The EDPB's processing activities are governed by Regulation (EU) 2016/679 (GDPR) and Regulation (EU) 2018/1725. The latter regulation applies specifically to EU institutions' data handling practices, including the EDPB's operations. Article 70 of GDPR defines the EDPB's role in relation to personal data processing, while Articles 75 and 76 outline its responsibilities. The EDPB has a designated Data Protection Officer (DPO) who is responsible for overseeing data protection practices within the organization. The DPO's position and tasks are defined in Regulation 2018/1725, specifically in Articles 43 to 45.

The EDPB's General Data Protection Notice is an important resource for individuals and organizations seeking information on EU institutions' data handling practices. The notice provides transparency into the EDPB's processing activities, which may be relevant for clients with interests in GDPR compliance. Lawyers and compliance officers should note that the EDPB has a centralised registry of records of its processing activities involving personal data, as stipulated in Article 31 of Regulation 2018/1725. This registry will be updated regularly to reflect changes in the EDPB's processing operations.

Lawyers and compliance officers should note that the European Data Protection Board (EDPB) has published a general data protection notice outlining its processing activities, which may be relevant for clients with interests in EU institutions' data handling practices. They should also be aware of the EDPB's designated DPO and the procedures for exercising data subject rights.

Source: Original reporting via the European Data Protection Board's General Data Protection Notice