European Data Protection Board October 2019 Plenary
During the 8th - 9th of October 2019 the Plenary of European Data Protection Board (body with legal personality, established based on Article 68 of the General Data Protection Board) took place, during which, mainly, the following documents were adopted:
- Guidelines on the lawful basis for processing for online services based on contracts - Article 6 (1) (b) GDPR
The Board adopted the final form of these guidelines intended to clarify the applicability of Article 6 paragraph (1) letter b) of the General Data Protection Regulation (GDPR) in the context of information society services. It contains both general aspects regarding the possibility of using this condition for the processing of personal data in case of execution of a contract, as well as numerous edifying examples useful in the activity of the controller. Also, there are presented situations where the applicability of Article 6 paragraph (1) letter b) interferes with other grounds of legality of the processing provided by Article 6 of the General Data Protection Regulation.
Following the request sent by the Supervisory Authority of the United Kingdom, the European Data Protection Board adopted an opinion in which it considers that the Equinix Binding Corporate Rules contain the necessary elements and guarantees provided by Article 47 of GDPR.
Additional information is available at: https://edpb.europa.eu/news/news_en
Legal and Communication Department