Following a public consultation and an adoption at its 15th plenary meeting, the European Data Protection Board has published a final version of its guidelines on the territorial scope under Article 3 of the EU General Data Protection Regulation. The guidelines were drawn up to assist data protection authorities with their application of the GDPR on certain data-processing activities, including those of EU companies working outside the European Economic Area. The EDPB also used the plenary meeting to adopt guidelines on data protection by design and default and adopted its own report on the EU-U.S. Privacy Shield review.
Full Story