The Article 29 Working Party (WP29), the grouping of representatives from national privacy regulators across the EU, has provided an update on its timetable for publishing further guidance under the General Data Protection Regulation (GDPR).
The update is set out in a press release issued following the WP29's June meeting.
Guidance on Data Privacy Impact Assessments (DPIAs)
The WP29 expects to finalise guidance on DPIAs in October 2017. Draft guidance was issued last month.
Other guidance in the 2017 Action Plan
The WP29 has confirmed that it expects guidance on the other areas covered in its 2017 Action Plan to be adopted by December 2017. Those areas are:
- Consent
- Profiling
- Transparency
- Data breach notifications; and
- Data transfers
The update will be frustrating for organisations trying to prepare for GDPR, as regulatory guidance is key to unlocking what is required to comply with a number of key areas.
Opinion on employee monitoring
The WP29 has also adopted an opinion on employee monitoring, which will be published soon. The WP29 last issued an opinion on this in 2001, so expect a number of changes to reflect changes in technologies and working practices.
As ever, our GDPR Hub keeps up to date with the latest developments. To discuss how we can assist your organisation prepare for GDPR please get in touch.
Contributor
Partner
