EDPB clarifies notion of main establishment and calls on EU legislators to make sure CSAM Regulation respects rights to privacy and data protection

Today, on February 14, 2024, the EDPB made two important announcements that could impact businesses and individuals across the EU:

Clarification on Main Establishment: The EDPB has provided new guidelines about what counts as a company’s “main establishment” in the EU. This is important for businesses that operate in more than one EU country because it helps determine which country’s data protection authority they primarily deal with. The guidance helps ensure that businesses know how to comply with EU data protection laws, especially if they make decisions about data processing outside the EU.


New Milestone Achieved in AI Governance

EU member states have unanimously voted for the Artificial Intelligence Act forward, setting the stage for changes in global AI regulation.

This decision, endorsed by all EU member states in COREPER, marks a crucial step forward despite recent concerns voiced by key stakeholders. European Commissioner Thierry Breton has commended the agreement for its balanced approach, fostering trust and innovation and ensuring the protection of citizens’ rights.


🤝  EU-Japan Agreement on Cross-Border Data Flows: An Important Leap in Digital Collaboration

The EU and Japan have officially inked a landmark deal on cross-border data flows, marking an important step to drive digitalization across societies and economies. This agreement will seamlessly integrate into the EU-Japan Economic Partnership Agreement (EPA), representing a significant milestone in forming stronger ties between the EU and Japan.


California AG Bonta Investigates Streaming Services for CCPA Compliance

California Attorney General Rob Bonta has announced an investigation into popular streaming services for potential California Consumer Privacy Act (CCPA) violations. The focus is on ensuring compliance with CCPA’s opt-out requirements for businesses selling or sharing consumer personal information.


EDPB Launches Website Auditing Tool

On January 29, 2024, the European Data Protection Board (EDPB) unveiled its latest initiative—a Website Auditing Tool designed to assess website compliance with the law. Developed within the framework of the EDPB Support Pool of Experts (SPE), this tool caters to legal and technical auditors at Data Protection Authorities (DPAs), as well as controllers and processors seeking to evaluate their websites.