Finland Tietosuoja News

EDPB Publishes Template for Data Protection Impact Assessments – Provide Feedback

The European Data Protection Board (EDPB) published a template for Data Protection Impact Assessments (DPIAs) to support organizations in reporting and consistent GDPR compliance across the EU. The template provides a step-by-step structure for presenting DPIA results and includes guidance on key concepts. A public consultation is open until 9 June 2026, after which EU national data protection authorities will adopt the template either as-is or as a national version.

Guidelines 1/2026 on Processing Personal Data for Scientific Research

Euroopan tietosuojaneuvosto on julkaissut ohjeistuksen henkilötietojen käytöstä tieteellisessä tutkimuksessa. Ohjeet selkeyttävät tutkimusdatan uusiokäytön sääntöjä, laajentavat suostumusmahdollisuuksia "laajaan suostumukseen" ja "dynaamiseen suostumukseen" sekä määrittelevät kuusi kriteeriä tieteellisen tutkimuksen tunnistamiseksi. Kommentit ohjeistuksen luonnokseen otetaan vastaan 25. kesäkuuta 2026 asti.

Europrivacy Certification Now Covers Non-EU Organizations

The European Data Protection Board approved updated Europrivacy certification criteria at its April 2026 plenary session and endorsed the use of Europrivacy certification as a tool for international personal data transfers under Articles 42 and 46 GDPR. The certification scheme has been expanded to cover non-EU controllers and processors subject to GDPR, including organizations offering products or services to Europeans or processing personal data for behavioral monitoring of EU residents. Non-EU data importers not directly subject to GDPR can now apply for Europrivacy certification to validate appropriate safeguards for data transfers they receive from the EU. The original Europrivacy criteria were approved in October 2022 as the first EU-wide data protection seal.