The European Data Protection Board has adopted the final version of the guidelines on international data transfers and provided new AI training resources for compliance professionals.
Third Country Data Transfers
On the Article 48 GDPR guidelines, the EBPB clarified how organizations can legally respond to data requests from non-EU authorities. Key updates include:
- Third-country decisions can't be automatically recognized in Europe, these need to be based on international agreements or the appropriate legal basis.
- A Case-by-case basis is needed for more obscure data sharing scenarios
AI Security & Data Protection Training
A new training report was launched targeting legal professionals such as DPOs and privacy experts. There is a 'critical shortage' of AI and data protection skills, according the EDPB, and the training will:
- Address critical shortage of AI data protection expertise
- Equip professionals with essential competences within AI and data protection.
