European Commission Has Published Second Report on the Application of the GDPR

On October 23, 2024, The European Commission (“Commission”) has published  the second report on the application of the General Data Protection Regulation (“Report”) on its official website. The European Commission has published two reports following the implementation of the General Data Protection Regulation (“GDPR”). The second report provides important assessments regarding the application of the GDPR and emphasizes the need for consistent interpretation and enforcement.

According to the Report;

• The report highlights significant issues, including the divergent interpretations of GDPR provisions among member states, the weak cooperation between data protection authorities (“DPAs”), and the challenges organizations face in achieving compliance. These factors create inconsistencies and uncertainties in data protection practices, hindering the effective safeguarding of international data transfers and the rights of data subjects.
• In the first report published in 2020, while some positive developments in the application of GDPR were observed, several shortcomings were also identified. These shortcomings included the lack of adequate resources allocated to DPAs, inconsistent application of the regulation, and insufficient implementation of data subjects' rights. Additionally, the need for continuous monitoring of the relationship between new technologies, particularly artificial intelligence, and the GDPR was emphasized.
• To address these shortcomings, the Commission recommended aligning national laws more closely with the GDPR, enhancing cooperation among DPAs, and ensuring adequate resource allocation to these authorities. Furthermore, it stressed the necessity of providing clear guidance, practical tools, and standard contractual clauses to assist organizations in achieving GDPR compliance.
• The second report assesses the impact of new regulations in the digital sector while drawing attention to ongoing challenges. Consistent application of the GDPR and the maintenance of data protection standards remain critical focal points at both national and international levels. Strengthening data protection practices and fostering a sustainable culture of data protection are essential in this context.
• The Commission indicates that the increased use of cooperation and consistency mechanisms by DPAs demonstrates that differing opinions are being resolved at the cross-border level. The effectiveness of these mechanisms is critical for the consistent application of the GDPR.

King regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr