EDPB PUBLISHES ITS 34. PLENARY SESSION

21.07.2020

 

The European Data Protection Board (“EDPB”) released its 34. Plenary Session carried out on 20 July 2020 in Brussels.

In the Plenary session, the EDPB adopted a statement on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland and Maximillian Schrems, which invalidates Decision 2016/1250 on the adequacy of the protection provided by the EU-US Privacy Shield and considers Commission Decision 2010/87 on Standard Contractual Clauses (“SCC”) for the transfer of personal data to processors established in third countries valid.

Moreover, Guidelines on the second Payment Services Directive (“PSD2”) which modernises the legal framework for the payment services market, has been adopted in the session. The Guidelines point out that regarding the provision stipulated by the GDPR, the processing of special categories of personal data is generally prohibited, except when explicit consent is given by the data subject or processing is necessary for reasons of substantial public interest.

Lastly, the Board adopted a letter in response to MEP Ďuriš Nicholsonová’s questions on data protection in the context of the fight against COVID-19. The letter addresses questions on the harmonisation and interoperability of contact tracing applications, the requirement of a DPIA for such processing and the duration for which processing may be put in place.

You can reach the EDBP’s press release here.

Should you have any queries and/or remarks, please do not hesitate to contact us. 

 

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr