In a reply to the European Parliament’s Civil Liberties, Justice and Home Affairs Committee, the European Data Protection Board said protections of personal data transferred to third countries resulting from the Second Additional Protocol to the Cybercrime Convention “must be essentially equivalent to the EU level of protection.” The EDPB also adopted a final version of the Guidelines on Codes of Conduct as a tool for transfers and a letter on AI liability, welcoming plans to adapt rules to artificial intelligence.