WP29 approves revised guidelines on the right to “data portability”

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). In that occasion, WP29 approved the Revised Guidelines on the right to "data portability", wp242rev.01 (Revised Guidelines), substituting the Guidelines on the right to "data portability" (Guidelines). Data portability allows data subjects to receive the personal data provided to a controller, Read more [...]

WP29 publishes revised guidelines on identifying a data controller’s lead supervisory authority

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). In that occasion, WP29 approved the Revised Guidelines on The Lead Supervisory Authority, wp244rev.01 (Revised Guidelines), which contain several differences compared to the Guidelines on identifying a data controller's lead supervisory authority (Guidelines) previously published. The Read more [...]

WP29 published Revised Guidelines on Data Protection Officer

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). Among other documents, it approved the Revised Guidelines on DPOs (Revised Guidelines), which contain also the following highlights compare to the Guidelines on Data Protection Officer (Guidelines) previously published. Accountability principle. The Revised Guidelines clarifies how Read more [...]

WP29 publishes Guidelines on Data Protection Impact Assessment

In its plenary meeting held in April 2017, Working Party 29 (WP29) examined certain critical matters regarding the implementation of Regulation 2016/679, the s.c. General Data Protection Regulation (GDPR). Among other documents, WP29 also adopted Guidelines on Data Protection Impact Assessment (DPIA), wp248,  which will be open for public consultation for 6 weeks before their final adoption. Data controllers should see the carrying out of a DPIA as a useful and positive activity that aids Read more [...]

Facebook user ordered by DPA to remove posts referring to judgments containing data of minor

On February 23, 2017, the Garante per la Protezione dei Dati Personali, the Italian Data Protection Authority (DPA), ordered a mother to delete from her Facebook feed posts containing two  judgments that include private aspects of her family’s life and most of all her daughter's life. The DPA noted that the posted judgments allowed the identification of the minor daughter and contained private information (also related to the minor's sexuality) relating to the family’s past and the Read more [...]