EDPB Annual Report 2021: Enhancing the depth and breadth of data protection
Annual Report Overview
The EDPB Annual Report 2021 provides a detailed overview of the EDPB's work in the previous year. Key highlights include:
- Completion of many key actions to achieve the objectives set out in the EDPB Strategy 2021-2023.
- Adoption of the EDPB Work Programme for 2021-2022, aligning with the Strategy's priorities.
- Adoption of Recommendations on supplementary measures following the Schrems II ruling.
- Adoption of opinions on UK adequacy decisions and a draft adequacy decision for the Republic of Korea.
- Adoption of guidance documents on international transfer tools and joint opinions on SCCs.
- Joint opinions on the Data Governance Act and Artificial Intelligence Act.
- Adoption of statements on the Digital Service Package and Data Strategy.
- Adoption of guidelines and recommendations on topics such as personal data breach notifications, connected vehicles, and virtual voice assistants.
- Adoption of 35 Art. 64 GDPR consistency opinions.
- Adoption of the first Art. 66 GDPR Urgent Binding Decision and the second Art. 65 GDPR binding decision.
- Adoption of 8 guidelines and recommendations in their final version following public consultation.
- Adoption of 35 Art. 64 GDPR consistency opinions.
- Adoption of 375 cross-border cases, 131 originating from other sources.
- Adoption of 209 draft decisions, 141 resulting in final decisions.
- Initiation of 243 formal mutual assistance procedures and 2418 informal mutual assistance procedures.
International Transfers of Personal Data
The EDPB continued to focus on international transfers of personal data, including:
- Adoption of final Recommendations on supplementary measures following the Schrems II ruling.
- Adoption of opinions on UK adequacy decisions and a draft adequacy decision for the Republic of Korea.
- Adoption of guidance documents on international transfer tools and joint opinions on SCCs.
Digital Policy
In 2021, the EDPB paid significant attention to digital policy, including:
- Joint opinions on the Data Governance Act and Artificial Intelligence Act.
- Adoption of statements on the Digital Service Package and Data Strategy.
Law Enforcement
The EDPB also focused on law enforcement issues, such as:
- Adoption of its first Art. 66 GDPR Urgent Binding Decision.
- Adoption of its second Art. 65 GDPR binding decision.
- Evaluation of the LED itself.
Consistency in Enforcement and Cooperation
The EDPB ensured consistency in enforcement and cooperation between national authorities through:
- Adoption of 35 Art. 64 GDPR consistency opinions.
- Adoption of 8 guidelines and recommendations in their final version following public consultation.
One-Stop-Shop Mechanism
The One-Stop-Shop mechanism facilitated cooperation between the Lead Supervisory Authority (LSA) and the Competent Supervisory Authorities (CSAs), leading to:
- Adoption of 209 draft decisions, 141 resulting in final decisions.
- Initiation of 243 formal mutual assistance procedures and 2418 informal mutual assistance procedures.
References and Notes
To read the EDPB Annual Report 2021, click here.
Note: References to case register entries in these statistics do not have a 1-to-1 correlation to the number of cross-border complaints handled per country. Depending on the Member State legislation, supervisory authorities may have handled complaints outside of the Art. 60 procedure in accordance with their national law.