Out-Law / Your Daily Need-To-Know

Out-Law News 1 min. read

Data protection watchdog promises new cloud computing guidance


New cloud computing guidance is to be issued by an EU data protection watchdog this year.

European data protection supervisor Giovanni Buttarelli confirmed the plans in his newly published annual report for 2017 (86-page / 4.31MB PDF).

Further new guidelines on IT governance and management will also be issued by the supervisor in 2018, according to the report.

Among the supervisor's other "main objectives" for 2018 is preparing for the European Data Protection Board (EDPB) to become operational. The EDPB will replace the existing Article 29 Working Party as a regulatory body under the EU's General Data Protection Regulation (GDPR) when the GDPR begins to apply on 25 May.

The EDPB will be comprised of representatives from national data protection authorities around the EU, as well as the European data protection supervisor.

Under the GDPR, the EDPB has specific tasks to fulfil, including issuing guidelines on a range of data protection matters like the Working Party has done, but it has also been given a broader role in enforcement, including powers to issue binding decisions to resolve disputes between national data protection authorities over the best course of action to take in cases where an organisation's compliance with the Regulation is being investigated.

The supervisor said in its report that it is undertaking "preparatory work" to enable "that the proper transitional arrangements are in place for a smooth handover" to the EDPB model from 25 May.

"This work will include ensuring that we have sufficient human and financial resources and that we have established the appropriate working methods," it said.

The supervisor also confirmed that it will issue a new opinion on the topic of data protection by design and by default – new principles enshrined in the GDPR – in early 2018. It also promised to provide "targeted input where appropriate" to the continuing development of the proposed new EU regulation on privacy and electronic communications (e-Privacy).

We are processing your request. \n Thank you for your patience. An error occurred. This could be due to inactivity on the page - please try again.