Last week, the Article 29 Working Party in its plenary session adopted revised versions of its guidance on data protection officers, the right to data portability, and identifying a lead supervisory authority under the GDPR. The IAPP reported on the draft guidance documents when they were first published. The revised guidance documents incorporate changes based on the WP29’s consultation with stakeholders after publication of the original drafts. Generally, the changes are minor, writes IAPP Westin Research Fellow Cobun Keegan, CIPP/US, CIPM, for Privacy Tracker, but the WP29 has provided a few significant clarifications.
Full Story