EU: EDPB publishes Annual Report 2021
The European Data Protection Board ('EDPB') published, on 12 May 2022, its Annual Report 2021. In particular, the Annual Report addresses, among other things, the EDPB's activities in 2021, covering topics such as adopted guidance and opinions, as well as its involvement in various legislative consultations. In addition, the Annual Report emphasises that the EDPB continued to focus on international transfers of personal data and notes that in 2021, the EDPB adopted among others, the final version of the recommendations on supplementary measures following the Court of the European Union's judgment in Data Protection Commissioner v. Facebook Ireland Limited, Maximillian Schrems (C-311/18) ('Schrems II'), the opinions on the UK draft adequacy decisions, and guidelines on codes of conduct as tools for transfers.
Furthermore, the Annual Report outlines that another important area of focus in 2021 was digital policy, noting that in the framework of the EU's Digital Strategy, the European Commission put forward several proposals on which the EDPB, together with the European Data Protection Supervisor ('EDPS'), issued legislative advice. For example, the Annual Report notes that the EDPB adopted, among others, a Joint Opinion with the EDPS on the proposal for a Data Governance Act ('DGA'), a statement on the Digital Service Package and Data Strategy, and a Joint Opinion with the EDPS on the draft Artificial Intelligence Act.
Moreover, the Annual Report highlights that the EDPB's goals for 2022, includes work on guidance on topics as varied as legitimate interest as a legal basis and the use of facial recognition by law enforcement authorities. Lastly, the Annual Report notes that the EDPB will also continue its work to optimise cooperation and enforcement.
UPDATE (13 May 2022)
EDPB publishes summary of its Annual Report 2021
The EDPB published, on 12 May 2022, a summary of its Annual Report.
You can read the summary here.