The Multistakeholder Expert Group on the General Data Protection Regulation (GDPR) published a report on the application of the GDPR to the European Commission. The report highlighted positive developments in data protection compliance, but also identified concerns regarding awareness of data subjects, automated decision-making, data portability, compliance with GDPR principles, transparency obligations, and the application of GDPR in conjunction with other regulations.
Key Points:
- Positive developments in data protection compliance and awareness were noted.
- Concerns were raised about lack of awareness among data subjects, particularly regarding their rights and how to exercise them.
- Issues highlighted include concerns about automated decision-making, data portability, compliance with GDPR principles, transparency obligations, and GDPR’s interaction with other regulations such as AML obligations and PSD2.
- Legal ambiguity surrounding Standard Contractual Clauses for data transfers outside the EU was also noted, along with challenges related to enforcement of GDPR in cross-border cases.
