Following its 14th plenary meeting, the European Data Protection Board has announced it has drawn up a final draft for guidance on data processing for online services based on contracts. The guidelines feature observations from the EDPB on data protection principles and the interaction of Article 6(1)(b) with other lawful bases. Applicability of Article 6(1)(b) with bundling of separate services and termination of a contract is also discussed in the guidance. In addition, the EDPB addressed a pending Passenger Name Records agreement with Canada and offered an opinion on the Equinix binding corporate rules.
Full Story