On December 21, 2020, the European Data Protection Board (the “EDPB”) published its Strategy 2021-2023 (the “Strategy”). The strategy aims to define the four main pillars of the EDPB strategic goals by 2023 and the main actions to achieve these goals:
First pillar: promote harmonization and facilitate compliance. The EDPB will continue to provide practical guidance on key terms in EU data protection law. In doing so, the EDPB will continue to work with external stakeholders by organizing stakeholder events and public consultations. The EDPB will also further promote the development and implementation of compliance mechanisms for inspectors / processors (in particular codes of conduct and certifications) and common tools to raise awareness among non-professionals (such as subject matter experts and data subjects, including children).
Second pillar: Supporting effective enforcement and cooperation between national supervisory authorities. The EDPB will promote and facilitate the application of the cooperation and coherence mechanisms of the EU General Data Protection Regulation (GDPR), promote the joint application of key concepts related to these procedures and strengthen communication between supervisory authorities (“SAs”). in this context. The EDPB will also implement a Coordinated Enforcement Framework (“CEF”) that will allow for joint action in a flexible but coordinated manner using common methodologies. In addition, the EDPB will set up a pool of experts who will provide material support in the form of specialist knowledge. This initiative will be particularly important for investigative and enforcement operations of significant common interest.
Third pillar: a fundamental approach to new technologies. The EDPB will monitor and establish common positions and guidelines on emerging technologies, including in areas such as artificial intelligence, biometrics, profiling and ad tech. The EDPB will continue to evaluate existing positions on applications such as cloud services and blockchain. In line with the strategy, the EDPB will also provide further guidance on data protection by design and standard, as well as accountability. In addition, the EDPB will step up engagement and collaboration with other regulators such as consumer and competition authorities as well as policy makers to promote legal consistency and individual protection.
Fourth pillar: the global dimension. The EDPB will promote high EU and global standards for international data transfer by promoting the use of transfer instruments that guarantee an essentially equivalent level of protection for the personal data transferred. Practical instructions are being developed for these existing and new transfer instruments. The EDPB will also work with the international community to promote EU data protection as a global model. In addition, the EDPB will focus on working with SAs from third countries, including in enforcement cases involving third country inspectors / processors.
Read the full EDPB strategy.