These comments refer to the draft implementing rules on the Data Protection Officer (DPO) at Eurojust ('the draft rules'). Our comments refer to the document submitted on 24 July 2020.
EDPS comments to the EIB concerning the DPO implementing rules and the procedure for the exercise of data subjects' rights (Case 2020-0683).
Informal consultation from an EU Agency on whether a particular number of data subjects concerned by a processing should be considered as “large scale” in the sense of Article 39(3)(b) of the Regulation.
The EDPS notes that the Regulation itself does not define what constitutes “large-scale”, analyses existing guidance on the matter and concludes that in the case of the processing underlying the informal consultation, the proportion of the relevant population as well as the nature of the personal data processed and possible resulting risks cumulatively advocate for conducting a DPIA in the case at hand.
EDPS reply on an informal consultation on broad access requests.
EDPS comments on Eurojust’s draft internal rules concerning restrictions of certain data subjects’ rights (Article 25 of the Regulation (EU) 2018/1725)