Final
Technology Expert Subgroup meeting
16 January 2019, Brussels, Rue Montoyer 30
Items
Approval of the Agenda
The draft agenda was revised to add an item on AoB concerning the “.eu” and “.com” domain and was
thus approved.
Welcome
The coordinator welcomed the participants and reported from the plenary and SAESG meeting.
He then presented the agenda. In the context of DPIA lists the coordinator asked the participants to
state whether their SA plans to submit a list according to Art 35.5 GDPR.
Art 64 on the interplay between ePrivacy and GDPR discussion (rapporteur: Sec)
The Secretariat presented the outcome of the questionnaire. Two main options were identified and
the Secretariat will provide a summary of these options and further analyse them.
The Secretariat will share the working documents with these SAs on 30 January 2019.
The outcome will be discussed at the next Technology expert subgroup in February with the objective
of an adoption at the plenary in March. The Secretariat will provide the document to be discussed to
all the members by 10 February 2019.
7/02/2019
Data Breach Notifications
State of play (Rapporteur:
The rapporteur presented the latest figures on the Data Breach Notifications (DBNs) received.
One participant stated that they are establishing a framework for notifications beyond the GDPR scope
to collaborate with other national authorities. Participants were invited to send to the Secretariat
information on their public national statistics.
Sharing of DBN in IMI
During the Secretariat’s work on a document on how to handle DBNs in IMI two issues emerged for
transborder breaches:
For the February EDPB Plenary meeting a written note for information will be drafted by the
Secretariat.
Mandate for work item on DBN
This item was removed from the agenda and will be discussed at the next meeting in February.
Data Protection by Design and by Default Guidelines (rapporteur:
The Rapporteur presented the latest version of the Guidelines, incorporating the first round of
comments which were discussed with the drafting team.
Participants were invited to provide written comments and examples by 31 January 2019. A new
version will be provided by 10 February and discussed at the February meeting of the expert subgroup.
Guidelines on Videosurveillance (rapporteurs:
)
The co-rapporteur gave a presentation on the state of play of the work on the guidelines. Several
questions were put forward by the drafting team.
The drafting team will circulate the latest version by 18 January 2019. Participants were invited to
provide comments until the 31 January 2019. An updated draft will be circulated by 10 February 2019
and discussed at the February meeting of the expert subgroup.
AOB, conclusion, next steps
Blockchain mandate for the plenary
A draft request for mandate is needed for this item.
The following members voiced their willingness to contribute:
2
7/02/2019
.eu and .com domains
To-do/Next steps
DPIA Lists:
Members of the ESG are invited to consult their authority whether an Art 35.5 GDPR list is
scheduled for submission by 25 January 2019
Interplay of ePrivacy and GDPR
The Secretariat will provide a draft document by 10 February 2019 in assistance with
The document will then be discussed at the February expert subgroup meeting.
Data breach notifications
Members of the expert subgroup are invited to share statistics among each other.
The Secretariat will prepare a presentation of the instructions for the February Expert
Subgroup meeting.
The Secretariat will prepare a note for information for the February Plenary
Guidelines on Video Surveillance
The drafting team will circulate the latest version by 18 January 2019,
Comments by participants until the 31 January 2019.
Updated draft by 10 February 2019
Blockchain work item
Members of the expert subgroup to inform Coordinator and Secretariat if they wish to
contribute to a request for mandate by 25 January 2019.
Annex: Attendance List
- SAs: AT, BE, BG, CZ, DK, DE (Schleswig-Holstein), EDPS, EE, IE, EL, ES, FI, FR, IT, LU, HU, MT, NL, PL, PT,
RO, SE, SI, SK, UK, NO
- European Commission
- EDPB Secretariat
3
7/02/2019