Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

Czech SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 GDPR
8 January 2020
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 11/2019 on the draft list of the competent supervisory authority of the Czech Republic regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
DK SA Standard Contractual Clauses for the purposes of compliance with art. 28 GDPR
10 December 2019
Decision Type
SA
Télécharger file 1
Télécharger file 2
Opinion / Binding decision References
Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)
Approval of the Controller Binding Corporate Rules of ExxonMobil
4 December 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 16/2019 on the draft decision of the Belgian Supervisory Authority regarding the Binding Corporate Rules of ExxonMobil Corporation
Netherland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
27 September 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 16/2018 on the draft list of the competent supervisory authority of the Netherlands regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
French SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
12 September 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
AT SA's decision on the accreditation requirements for a code of conduct monitoring body
30 August 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 9/2019 on the Austrian data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR
Iceland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
29 August 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 7/2019 on the draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Iceland Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
16 August 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Malta Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
13 August 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Poland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision Type
SA
Télécharger
Opinion / Binding decision References
Opinion 17/2018 on the draft list of the competent supervisory authority of Poland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)