A quarterly update with many academic articles surrounding the publication of more European digital policies.

These months have been all about Data Transfers ✈️. After SAs in Austria 🇦🇹 and France 🇫🇷 enforced the post-Schrems II data transfer framework, the first steps have been taken to protect digital rights in the public cloud. The EDPB 🇪🇺 aims to enforce the framework in the public sector.

The different institutions of the EU 🇪🇺 clarify the scope of digital rights, in the GDPR as well as in new legislation 📑. Supervisors find effective ways enforcing 👮🏻‍♂️ breaches of legislation and the Dutch 🇳🇱 with discrimination on ethnicity and nationality by government.

This summer many academic legal 📄 and security 🔒 related articles have been published. A clear trend is visible in assessing organisations and their concrete security measures, as seen in the SchremsII follow-up and the focus by SA's in their enforcement.

MEPs get involved in the adequacy debate for the U.K. 🇬🇧 In addition, the ECHR 🇪🇺 pronounces on conditions for safeguards in (mass) surveillance and SAs continue to issue fines.

New 🇪🇺 AI legislation proposed and courts confirm data protection fines 🇪🇸🇩🇪🇳🇱. Supervisory Authorities act against 🇺🇸 tech companies LinkedIn, Facebook and Whatsapp.

European supervisory authorities 🇫🇷🇪🇸🇮🇹🇳🇱 keep fining organisations for clear GDPR and ePrivacy violations. The current ePrivacy Directive enforceforment keeps clear from one-stop-shop mechanisms under the GDPR. This might change when the final text of the ePrivacy Regulation 🇪🇺 will be adopted.

In February 2021 more calls for 🇪🇺 regulation and enforcement have been made. In Dutch 🇳🇱 news, more clearance on legal grounds from case law and from (academic) articles.

In 2021, Supervisory Authorities 🇩🇪🇮🇹🇫🇷🇧🇪🇪🇸 are still handing out GDPR-fines and courts are affirming them. Dutch 🇳🇱 case law discovers nuance in GDPR requests and Dutch politics bans nationality as variable in risk models.

In December 2020 various European 🇪🇺 Supervisory Authorities have published fines and have published some guidance, among more case law 🇳🇱 on data subject requests

The EDPB and EC publish their views on processing post Schrems II, among more publications on data protection.

The first monthly data protection newsletter with 🇪🇺 and 🇳🇱 developments, ideas and resources for October 2020.