The European Data Protection Supervisor issued a rebuke to the European Border and Coast Guard Agency for violating the Data Protection Regulation (EU) 2018/1725 when it failed to complete a data protection assessment before moving to the cloud. The EDPS found the agency also failed to show that it limited cloud server's "collection of personal data to what is necessary.” The EDPS also ordered the agency to “review its data protection impact assessment and the record of processing activities.”
Full Story