During its 37th plenary session, the EDPB:
- adopted Guidelines on the concepts of controller and processor under GDPR and Guidelines on the targeting of social media users. The guidelines will be subject to public consultation;
- created two new task forces, one that will look for complaints submitted by data subjects following the CJEU Schrems II ruling and one that will assist the controllers and processors in their efforts to identify and implement appropriate measures to ensure adequate protection when transferring data to third countries.
The press release is available here.
