European Data Protection Supervisor
This Opinion relates to the European Court of Auditors (‘the Court of Auditors’) consultation on the legal basis for personal data transfers to the European University Institute.
Informal consultation from an EU Agency on whether a particular number of data subjects concerned by a processing should be considered as “large scale” in the sense of Article 39(3)(b) of the Regulation.
The EDPS notes that the Regulation itself does not define what constitutes “large-scale”, analyses existing guidance on the matter and concludes that in the case of the processing underlying the informal consultation, the proportion of the relevant population as well as the nature of the personal data processed and possible resulting risks cumulatively advocate for conducting a DPIA in the case at hand.
Consultation from an European Institution on the relationship with its contractor for providing travel agency services. The contractor considers that it should be a separate controller; the EDPS analyses the relationship at hand, the consequences of different legal constructions, and concludes that a controller-processor relationship is the most appropriate arrangement.
Arrangement involving transfers of personal data from an EUI to an International organisation
EDPS Letter Consultation on agreement for payroll services for local employees in a third country
EDPS Comments to DG Connect of the European Commission on the monitoring of COVID-19 spread.
Consultation by the Authority for European Political Parties and European Political Foundations (APPF) to the EDPS regarding data protection rules.
Letter concerning a consultation on EASO's social media monitoring reports.
Letter concerning a consultation on the application of data protection clauses in EUI contracts.
Letter concerning a consultation on the notion of "controllership" in the context of the Clinical Trials Portal and Database
Letter addressed to the DPOs of the EC, EIB, and EIF on implications of GDPR on investigative activities of EU institutions, notably regarding anti-fraud, competition and trade.
Letter concerning the European Reference Networks (ERN) Communication processing operation
Letter addressed to the EUROPOL's Data Protection Officer referring to the consultation of 5 July 2018 concerning European law enforcement authorities’ (‘LEA’) access to personal data contained in the WHOIS database.
Consultation concerning certain clauses that a contractor wants to include in service contracts to align with the conditions set forth by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR)
Request for consultation on the European Ombudsman’s rules on the redaction of documents (case 2018-0051)
Consultation concernant la mise en oeuvre d'un contrat de prestation de service entre certaines institutions européennes regroupées dans le cadre du Comité des activités sociales (CAS) de Luxembourg et la société EMRESA S.A, afin d'octroyer des remises commerciales au profit du personnel actif et des pensionnés de ces institutions.
EDPS consultation under Article 27(3) of Regulation (EC) 45/2001 regarding the processing of fingerprint data for the purpose of a research study carried out by the Joint Research Centre (JRC).
Consultation under Article 46(d) of Regulation (EC) 45/2001 regarding publication of certain categories of personal data of the managers and staff members of an EU body in EU Whoiswho Directory on internet
EDPS consultation of 16 December 2016 on the possibility of appointing a common/shared DPO between the European Parliament and the Authority for European Political Parties and European Political Foundations (Case 2016-1117)