GPDR entered into force about two months ago. However, a lot of questions on the implementation of Europe's new privacy rules need still to be addressed. In this context, the newly formed European Data Protection Board (former Art. 29 WP) initiated a public consultation on their guidelines on certification and certification criteria in accordance with Articles 42 and 43 of the GDPR.
Find out more on our perspective and on our other recent activities in this month's wrap-up.
Happy Reading,
Your SCOPE Europe Team
Certifications under GDPR
We commented on the European Data Protection Board's public consultation on Certification in accordance with Art. 42 and 43 GDPR. One of our key takeaways: a clear distinction between Certifications and Codes of Conduct is crucial to prevent confusion in the market. You will find our full statement here.
SWIPO Working Group meeting
Earlier this month, we participated in the second face-to-face meeting of the DSM Cloud Stakeholder group in Paris, discussing the development of a Code of Conduct for switching cloud service providers and porting of data (SWIPO). This self-regulatory process was initiated by the Free Flow of non-personal Data Regulation.
Privacy Shield under pressure
The European Parliament passed a resolution calling upon the EU Commission to suspend the EU-US data exchange deal, Privacy Shield, if the United States fails to comply in full by 1 September 2018.
mHealth contest: new deadline
We reported recently on the EDPS-IPEN Privacy by Design contest for mobile Health applications. As member of the drafting team of the mHealth Code of Conduct, we are excited that the deadline for application was extended to August (details here).
Coming up: September Edition
With the vacation period in full swing, you will hear from us again in September with updates on digital and data protection policies and co-regulation. Until then, we wish all of you a great summer.