The European Data Protection Board EDPB has released significant advancements aimed at facilitating data protection compliance and skills development. During its latest plenary session, the EDPB adopted the final version of its guidelines on data transfers to third country authorities, as well as introduced new training materials focused on artificial intelligence AI and data protection.
Key Updates to Data Transfer Guidelines:
After extensive public consultation, the EDPB’s guidelines on Art. 48 GDPR concerning data transfers to non-European country authorities have been finalized. These guidelines shed light on how organizations should evaluate requests for data transfers legally and explain that third country authority requests or decisions may not be automatically enforceable in Europe. While international agreements can sometimes establish legal bases or transfer grounds, alternatives are proposed when such agreements are inadequate. Notably, updates enhance the guidelines’ clarity, particularly regarding data processors and parent-subsidiary dynamics in data requests.
AI and Data Protection Training Initiatives:
With the high-paced development of AI, the EDPB has launched two innovative Support Pool of Experts SPE projects commissioned by the Hellenic Data Protection Authority HDPA. These projects, “Law & Compliance in AI Security and Data Protection” and “Fundamentals of Secure AI Systems with Personal Data,” target legal and technical professionals, respectively. The primary objective is to mitigate the skills gap in AI and data protection by equipping professionals with essential capabilities for carrying out privacy-friendly deployments of AI.
Unique to this initiative is a pilot project involving a community-editable version of the reports. This collaborative approach, hosted in the EDPB’s Git repository, allows collaboration with external contributors for ongoing improvements to the reports, ensuring they remain current with evolving technological landscapes.
Simplification of GDPR Record-Keeping:
The EDPB discussed the European Commission’s proposal to streamline record-keeping obligations for SMEs, SMCs, and similar-sized organizations. In collaboration with the European Data Protection Supervisor EDPS, the EDPB is preparing a joint opinion on this proposal aimed at alleviating administrative duties without compromising data protection standards.
These developments underscore the EDPB’s commitment to fostering a robust framework for data protection that accommodates technological advancements. By providing thorough guidance and developing supporting tools, the EDPB ensures that data protection professionals are well-equipped to manage and enforce compliance requirements effectively.
Original source link: [https://www.edpb.europa.eu/news/news/2025/edpb-publishes-final-version-guidelines-data-transfers-third-country-authorities-and_en]