Changing Requirements for a Changing World? The EDPB Annual Report 2020

According to EDPB Chair, Andrea Jelinek, “2020 and the COVID-19 pandemic significantly altered how we live and work. Given the increasing presence of data-driven technologies in addressing the pandemic, the awareness of data protection rights among individuals and organizations has never been more critical.”

en flag
nl flag
et flag
fi flag
fr flag
de flag
pt flag
ru flag
es flag

Content Assessment: The EDPB Annual Report 2020

Information - 95%
Insight - 95%
Relevance - 90%
Objectivity - 90%
Authority - 95%

93%

Excellent

A short percentage-based assessment of the qualitative benefit of the recent post highlighting the EDPB Annual Report for 2020.

Editor’s Note: The European Data Protection Board (EDPB) is an independent European body, established by the General Data Protection Regulation (GDPR), which aims to ensure the consistent application of data protection rules across the European Economic Area (EEA). It achieves this aim by promoting cooperation between national Supervisory Authorities (SAs) and issuing general, EEA-wide guidance regarding the interpretation and application of data protection rules.

The EDPB comprises the Heads of the EU SAs and the European Data Protection Supervisor (EDPS). The European Commission has the right to participate in the activities and meetings of the EDPB without voting rights. The SAs of the EEA countries (Iceland, Liechtenstein and Norway) are also members of the EDPB, although they do not hold the right to vote.

Press Announcement

EDPB Annual Report 2020: Ensuring Data Protection Rights in a Changing World

Today [June 2, 2021], the European Data Protection Board (EDPB) presented its Annual Report 2020. The report provides a detailed overview of the work carried out by the EDPB in a year marked by the worldwide pandemic.

EDPB Chair, Andrea Jelinek said: “2020 and the COVID-19 pandemic significantly altered how we live and work. Given the increasing presence of data-driven technologies in addressing the pandemic, the awareness of data protection rights among individuals and organizations has never been more critical. It is important to note that the 2020 lockdowns in all our countries did not mean a slowdown of the EDPB’s activities. 2020 was marked by many major developments in the EU data protection legal sphere, requiring the EDPB’s expertise and guidance.

During the COVID-19 pandemic, EEA Member States began taking measures to monitor, contain and mitigate the spread of the virus. The EDPB issued guidance on, amongst others, location and contact-tracing apps; processing health data for scientific research; restrictions on data subject rights in a state of emergency and data processing in the context of reopening borders.

The Court of Justice of the European Union’s ruling in Schrems II had significant implications for EEA-based entities that transfer data to the U.S. and other third countries. The EDPB issued an FAQ document, followed later by Recommendations for Supplementary Measures when using International transfer tools, to ensure compliance with the level of protection required under EU law, and Recommendations on European Essential Guarantees contributing to the assessment of surveillance measures allowing access to personal data by public authorities in third countries. The Recommendations for Supplementary Measures were subject to a public consultation. The EDPB received over 200 contributions from various stakeholders, which it is currently analyzing.

During 2020, the EDPB defined its Strategy for 2021-2023, which covers four main pillars with strategic objectives:

  1. Advancing harmonization and facilitating compliance;
  2. supporting effective enforcement and efficient cooperation between national supervisory authorities;
  3. a fundamental rights approach to new technologies and
  4. the global dimension. For each of the pillars, a set of key actions are defined to help achieve these objectives. In early 2021, the EDPB adopted its two-year work program for 2021-2022. The work program follows the priorities set out in the EDPB 2021-2023 Strategy and will put the EDPB’s strategic objectives into practice.

In 2020, the EDPB adopted 10 Guidelines on topics such as the concepts of controller and processor; and targeting of social media users, as well as three Guidelines in their final, post-consultation versions (on video devices, the right to be forgotten and data protection by design and default).

In addition to providing guidance, ensuring consistency in enforcement and cooperation between national authorities is a key task of the EDPB. In 2020, the EDPB issued 32 Opinions under Art. 64 GDPR. Most of these Opinions concern draft accreditation requirements for a code of conduct monitoring body or a certification body, as well as Controller Binding Corporate Rules for various companies.

On 9 November 2020, the EDPB adopted its first dispute resolution decision on the basis of Art. 65 GDPR. The binding decision addressed the dispute that arose after the Irish SA, acting as Lead SA, issued a draft decision regarding Twitter International Company and the subsequent relevant and reasoned objections expressed by a few Concerned SAs.

The GDPR requires the EEA SAs to cooperate closely to ensure the consistent application of the GDPR and protection of individual data protection rights across the EEA.

  • Between 1 January and 31 December 2020, there were 628 cross-border cases out of which 461 originated from a complaint, while 167 had other origins, such as investigations, legal obligations and/or media reports.
  • The One-Stop-Shop mechanism demands cooperation between the LSA and the CSAs. The LSA leads the investigation and plays a key role in the process of reaching consensus between the CSAs, in addition to working towards reaching a coordinated decision about the data controller or processor. Between 1 January 2020 and 31 December 2020, there were 203 draft decisions, of which 93 resulted in final decisions.
  • The mutual assistance procedure allows SAs to ask for information from other SAs or to request other measures for effective cooperation, such as prior authorizations or investigations. Between 1 January 2020 and 31 December 2020, SAs initiated 246 formal mutual assistance procedures. They initiated 2,258 informal mutual assistance procedures. Mutual assistance is also used by the SAs requesting the competent SA to handle complaints they received which do not relate to cross-border processing as defined by the GDPR.

Read the Complete Annual Report (PDF) from the EDPB – Mouseover to Scroll

EDPB Annual Report 2020 – 27.05.21

Read the original Announcement from the European Data Protection Board


Additional Reading

Source: ComplexDiscovery

Have a Request?

If you have information or offering requests that you would like to ask us about, please let us know and we will make our response to you a priority.

ComplexDiscovery is an online publication that highlights data and legal discovery insight and intelligence ranging from original research to aggregated news for use by business, information technology, and legal professionals. The highly targeted publication seeks to increase the collective understanding of readers regarding data and legal discovery information and issues and to provide an objective resource for considering trends, technologies, and services related to electronically stored information.

ComplexDiscovery OÜ is a technology marketing firm providing strategic planning and tactical execution expertise in support of data and legal discovery organizations. Registered as a private limited company in the European Union country of Estonia, one of the most digitally advanced countries in the world, ComplexDiscovery OÜ operates virtually worldwide to deliver marketing consulting and services.

CloudNine Secures Growth Equity Investment

According to Steve Johnson, co-founder and Partner at Crest Rock, “CloudNine...

Relativity Acquires Text IQ

"We're merely scratching the surface of what the application of AI...

Sandline Discovery Acquires Frankfurt Germany-based 24legal

According to Dominic Piernot, co-founder of 24legal, “We are super excited...

Consilio and Xact Data Discovery Merger Closes

“We are very pleased to close the merger with Xact Data...

A New Era in eDiscovery? Framing Market Growth Through the Lens of Six Eras

There are many excellent resources for considering chronological and historiographical approaches...

An eDiscovery Market Size Mashup: 2020-2025 Worldwide Software and Services Overview

While the Compound Annual Growth Rate (CAGR) for worldwide eDiscovery software...

Resetting the Baseline? eDiscovery Market Size Adjustments for 2020

An unanticipated pandemeconomic-driven retraction in eDiscovery spending during 2020 has resulted...

Home or Away? New eDiscovery Collection Market Sizing and Pricing Considerations

One of the key home (onsite) or away (remote) decisions that...

Five Great Reads on eDiscovery for May 2021

From cyber discovery and data breaches to business of law and...

Five Great Reads on eDiscovery for April 2021

From X-Road® and risk management to business confidence and cybersecurity, the...

Five Great Reads on eDiscovery for March 2021

From data breach economics and vulnerabilities to private-equity investments and vendor...

Five Great Reads on eDiscovery for February 2021

From litigation trends and legal tech investing to facial recognition and...

CloudNine Secures Growth Equity Investment

According to Steve Johnson, co-founder and Partner at Crest Rock, “CloudNine...

A Mushrooming Opportunity? Canopy Secures AI-Powered Data Breach Response Patent

According to Ralph Nickl, CEO and co-founder of Canopy, “Until recently,...

Exterro Launches FTK Central

According to Exterro Founder and CEO Bobby Balachandran, “FTK Central’s new processing...

The eDisclosure Systems Buyers Guide – 2021 Edition (Andrew Haslam)

Authored by industry expert Andrew Haslam, the eDisclosure Buyers Guide continues...

Checking Your Six? An Aggregate Overview of Six Semi-Annual eDiscovery Pricing Surveys

The anonymized aggregate results from six semi-annual surveys highlight eDiscovery pricing...

Alternative Price Styles? Summer 2021 eDiscovery Pricing Survey Results

Based on the complexity of data and legal discovery, it is...

Ready for Takeoff? Eighteen Observations on eDiscovery Business Confidence in the Spring of 2021

In the spring of 2021, 60.0% of eDiscovery Business Confidence Survey...

Issues Impacting eDiscovery Business Performance: A Spring 2021 Overview

In the spring of 2021, 25.0% of respondents viewed budgetary constraints...