The European Data Protection Board ('EDPB') announced, on 13 April 2023, that it had adopted a binding dispute resolution decision on the basis of Article 65 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), concerning a draft decision of the Irish Data Protection Commission ('DPC') on the legality of data transfers to the US by Meta Platforms Ireland Limited, relating to its Facebook service. In particular, the EDPB noted that the binding decision addresses important legal questions arising from the draft decision of the DPC, specifically settling the dispute with several other European data protection authorities ('DPAs') on whether an administrative fine and/or an additional order to bring processing into compliance must be included in the DPC's final decision. In this regard, the EDPB recalled that the DPC is now required to adopt such decision, at the latest one month after the EDPB has notified its decision.

Separately, the EDPB discussed the temporary ban imposed by the Italian data protection authority ('Garante') on OpenAI, L.L.C. regarding its ChatGPT service, and decided to launch a dedicated task force to foster cooperation and to exchange information on possible enforcement actions conducted by other DPAs.

You can read the announcement here.