Art. 29 working group: three gui­de­lines on the GDPR

The Artic­le 29 Working Group held a ple­na­ry ses­si­on in Decem­ber 2016 (cf. the Media release) issued gui­dance on three topics rela­ted to the Gene­ral Data Pro­tec­tion Regu­la­ti­on, all dated Decem­ber 13, 2016:

• Gui­de­lines on the right to data portability
• Gui­de­lines on Data Pro­tec­tion Offi­cers (‘DPOs’)
• Gui­de­lines for iden­ti­fy­ing a con­trol­ler or processor’s lead super­vi­so­ry authority

Fur­ther gui­de­lines are expec­ted in the cur­rent year, in par­ti­cu­lar on data pri­va­cy impact assess­ments and on certifications.

The Artic­le 29 Working Par­ty is based on Art. 29 of the Data Pro­tec­tion Direc­ti­ve, which is still in force until May 25, 2018. Under the GDPR, it will be repla­ced by the Euro­pean Data Pro­tec­tion Board pur­su­ant to Art. ff. GDPR (see reci­tal 139).