December 16, 2019

During the plenary, several topics were discussed:

• Article 64 GDPR Opinion on Accreditation Requirements for Codes of Conduct monitoring bodies by UK Supervisory Authority: the EDPB adopted its opinion on the UK Supervisory Authority’s (SA) draft decision on the Accreditation Requirements for Codes of Conduct monitoring bodies. The opinion aims to ensure consistency and the correct application of these requirements among EEA SAs. In the opinion, the EDPB proposes some changes, to ensure consistent application of the accreditation of monitoring bodies;
• response to BEREC’s request for guidance on the revision of its guidelines on net neutrality rules: the EDPB adopted its response to a request for guidance by the Body of European Regulators for Electronic Communication (BEREC) on the current EU data protection framework. In the letter, the EDPB raised concerns regarding the processing of domain names and URLs for the purposes of traffic management and billing (zero-rating offers). The EDPB says that it encourages internet access services and, where relevant, it encourages BEREC to define and agree on less invasive and more standardised ways to manage internet traffic, interoperable throughout different IASs, which are not based on the use of URLs and domain names; and
• guidelines on “the Criteria of the Right to be Forgotten in search engine cases under the GDPR” (part 1): the EDPB adopted draft guidelines, which provide an interpretation of Article 17 GDPR with regard to the grounds and exceptions for delisting requests directed at search engine providers. They update the 2014 guidelines on implementation of the Google Spain judgment (Case C-131/12 Google Spain SL v Agencia Española de Protección de Datos), issued by the Article 29 Working Party. These guidelines, which will be available for public consultation, will be complemented by another set of guidelines on the criteria for handling complaints for refusals of delisting.

To access the EDPB’s press release, click here.