EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
The EDPB recommends e-commerce sites offer guest checkout to protect user privacy, allowing mandatory accounts only for specific services under GDPR rules.
The EDPB and DPAs from countries with EU adequacy decisions strengthened cooperation in data protection enforcement and advisory priorities during their second joint meeting.
The EDPB invites public input to develop practical GDPR compliance templates, including DPIA and breach notification forms, by December 3, 2025.
The EDPB supports the EU-Brazil data adequacy decision but requests clarifications on DPIAs, transparency, law enforcement data use, and national security definitions.
EDPB supports six-year extension of UK adequacy decisions to 2031 but urges the Commission to address legal changes, monitor risks and ensure robust oversight and remedies.
The EDPB will coordinate an EU-wide enforcement action on GDPR transparency and information obligations, with national DPAs participating voluntarily and the action launching in 2026.
Meta appeals the General Court’s dismissal of its challenge to EDPB Opinion 08/2024, arguing procedural and legal errors on reviewability, liability, judicial protection, and reasoning.
EDPB will publish an EU-wide GDPR breach notification template to standardize reporting, aid cross-border compliance, and support accompanying guidance and tools.
The EDPB supports a six-month extension of the UK GDPR adequacy decisions until December 2025 while awaiting the UK’s data protection reform.
The EDPB’s 2024 Annual Report highlights new strategies, increased GDPR guidance, stakeholder engagement, and efforts to simplify data protection across Europe.
WhatsApp receives support from a CJEU adviser in its challenge against the EDPB over a €225 million fine for privacy violations.