Conference-GDPR-Lallemang.pdf

Here are the key points summarized:

European Data Protection Board (EDPB)

• Has a central role in the consistency mechanism of the GDPR
• Contributes to the consistent application of the GDPR by:
  • Providing mandatory advice when an EU institution or body wants to adopt certain measures
  • Issuing binding decisions when it plays its role as a conflict resolver
  • Processing urgent procedures

Mandatory Advice and Binding Decisions

• Mandatory advice is required for certain measures, such as:
  • Data processing operations that require a DPIA
  • Adoption of codes of conduct related to data processing in multiple Member States
  • Criteria for accrediting organizations responsible for validating codes of conduct
• Binding decisions are issued when the EDPB plays its role as a conflict resolver

Urgent Procedures

• An urgent procedure can be triggered by an exceptional circumstance, requiring the adoption of provisional measures
• A request for advice or binding decision can be made to the EDPB with extremely short response times

Consistency Mechanism

• For EU institutions and bodies:
  • Obligatory cooperation in cross-border cases
  • Clear procedures with strict deadlines
  • Need for internal procedures compatible with the consistency mechanism to ensure smooth cooperation
• For Data Controllers:
  • Common interpretation of the rights conferred by the GDPR across the EU
• For Supervisory Authorities (SAs):
  • Common interpretation of the obligations imposed by the GDPR

Open Questions

• Risk of abuse or overload of the EDPB?
• Need for each SA to cooperate in the consistency mechanism?
• Guarantee of rapid processes?
• Risk of blocking due to conflicts between national laws and exceptions?

Please note that this summary is based on my understanding of the text, and you may need to refer to the original document for further details.