The European Data Protection Board ('EDPB') announced, on 8 July 2021, that it had adopted Guidelines on Codes of Conduct as a tool for transfers, Guidelines on Virtual Voice Assistants, and Guidelines on the concepts of controller and processor, during its 51st plenary session. In particular, the EDPB highlighted that the main purpose of the Guidelines Codes of Conduct is to clarify the application of Articles 40(3) and 46(2)(e) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') which outline that, once approved by a competent supervisory authority and granted general validity by the European Commission, a code of conduct may also be used by controllers and proces
News
EU: EDPB adopts guidelines on codes of conduct, virtual voice assistants, and concepts of controller and processor
July 8, 2021
Summary
The European Data Protection Board (EDPB) adopted three sets of guidelines on codes of conduct for data transfers, virtual voice assistants, and the concepts of controller and processor during its 51st plenary session on 8 July 2021. These guidelines aim to clarify the application of GDPR Articles 40(3) and 46(2)(e) for data transfers outside the EU, address compliance challenges with virtual voice assistants, and provide clarifications on key concepts like joint controllers and processors. Additionally, the EDPB disbanded its TikTok Taskforce after TikTok Inc.'s establishment in the EU and transferred ongoing cases to the Irish Data Protection Commission. The EDPB also discussed potential topics for its first coordinated enforcement action, deciding to focus on the use of cloud-based services by public sector bodies.