EDPB Issues Guidance on Personal Data Transfers Based on Adequacy Decisions in the Context of the Law Enforcement Directive

2021 marks the year of the very first time that the European
Data Protection Board (‘EDPB’) issued guidance
on the Law Enforcement Directive (‘LED’), the
data protection framework for the law enforcement
sector. The LED essentially became applicable at the
same time as the, at least in terms of EDPB guidance,
more ‘popular’ General Data Protection Regulation
(‘GDPR’). The EDPB did not choose any side theme
for such a first guidance, but went right to the core
of what is probably one of the most complex areas
of the LED – namely international personal data
transfers based on adequacy decisions. On this
theme, the EDPB issued two documents, first, on 2
February 2021, ‘Recommendations 01/2021 on the adequacy
referential under the LawEnforcementDirective’
(‘Recommendations 01/2021’), and second, on
13 April 2021, ‘Opinion 15/2021 regarding the European
Commission Draft Implementing Decision pursuant
toDirective (EU) 2016/680 on the adequate protection
of personal data in the United Kingdom’
(‘Opinion 15/2021’). Whereas the first of these documents,
Recommendations 01/2021, provides the actual
abstract guidance, the second document, Opinion15/
2021, illustrates how the EDPB assesses its own
advice in practice using the draft LED adequacy decision
proposed by the European Commission (‘Commission’)
for the United Kingdom (‘UK’). Together
both documents provide the most comprehensive
overview of what the EDPB considers important for
adequacy decisions under the LED, which may also,
in the words of the EDPB, ‘guide third countries and
international organisations interested in obtaining
adequacy’.

Jaar van publicatie:2021

Trefwoorden:Data protection, LED, law enforcement, EDPB, UK, transfers, adequacy

Toegankelijkheid:Closed