Why calling the new Article 5(3) guidelines expansive is a massive understatement

They will cover many scenarios” – quite an understatement regarding the EDPB’s new guidelines on Art. 5(3) of the ePrivacy Directive (expanding its scope from cookies and the like to even IP addresses, URLs, pixels and more, through a broad interpretation of what “access” is).
Before publishing an analysis of the “content” part of the guidelines themselves (that’s for next week), it is important to have a discussion on the EDPB’s competence from a legal perspective: on what basis did it adopt these guidelines? Does it even have the authority to do so?
Looking forward to an exchange of views on this.
Data protection gdpr

🫖

Did this analysis get you thinking? Reach out!

DataLaws.net is entirely open-access, and instead of getting your data in exchange for this content, how about another trade? If this commentary saved you research time or sparked an idea, feel free to invite me over for tea, chai or a hot chocolate next time you are around Brussels or Antwerp - or invite me over to your offices for a chat!

Get in touch ↗   Let's connect on LinkedIn ↗