Dies ist eine HTML Version eines Anhanges der Informationsfreiheitsanfrage 'FOI request for all the FOI request submitted to the EDPB'.

Pending
EDPB Access to Documents Requests - State of play
To be registered
Pending Confirmatory request
Case number
Email received
Acknowledgement of receipt/registration
Deadline for answer
Documents requested
Date answer
Type of reply (positive, partially negative, negative)
Storage link
Case Officer
(1) Minutes of first plenary
Case 1-2018 (a)
20/06/2018
25/062018
10/07/2018
(2) Draft agenda of second plenary
06/07/2018
Full disclosure of both documents
Document(s) identified:2
Minutes of the second plenary
Case 1-2018 (b)
08/07/2018
/
/
(requested by the applicant in a subsequent email)
09/07/2018
No disclosure
Reason: doc not yet finalised
Document(s) identified:1
Minutes of first(1) and second plenaries(2)
(1) Disclosure of first plenary minutes
Case 2-2018
03/07/2018
05/07/2018
20/07/2018
20/07/2018
(2) No disclosure of second plenary minutes
Document(s) identified:2
Reason: doc not yet finalised
No disclosure
Reason: doc not yet finalised
Minutes of the third plenary
Case 3-2018
03/10/2018
10/10/2018
30/10/2018
30/10/2018
Note: the final version of the minutes was sent after having been approved,
Document(s) identified:1
on 31/01/2019, as proposed by SEC. The document was onlypartially
disclosed to the applicant as different exceptions under art. 4 of Regulation
1049/2001 were applicable.
All DPIA lists notified by SAs via IMI on the basis of article 35(4) GDPR
Case 4-2018
04/10/2018
10/10/2018
30/10/2018
30/10/2018
Full disclosure of all DPIA lists received at the time of the request
Document(s) identified:22
30/10/2018 (initial)
All infonotes (including their annexes) and all minutes of all expert subgroup meetings as well as
Full and partial disclosure
Case 5-2018
08/10/2018
10/10/2018
Extension: 20/11/2018
plenaries
Informal arrangement:
30/11/2018
Reason for partial disclosure: different exceptions under art. 4 of Regulation
30/11/2018
Document(s) identified:152
1049/2001 were applicable
Guidelines on territorial scope of GDPR adopted in September 2018
Case 6-2018
07/11/2018
08/11/2018
29/11/2018
29/11/2018
Full disclosure
Document(s) identified:1
Note: disclosure of guidelines adopted on 16 November 2018
(1) "(...) lists of processing operations which are subject to the requirement for a data protection
impact assessment within the meaining of art. 35(4) GDPR at the individual national supervisory
authorities (...) or rather the draft decisions of such lists available to you in the context of the
consistency mechanism";
(2) "(...) provide us with information on which member states have maintain its draft decision and
(1) Full disclosure
(2) Partial disclosure
Case 7-2018
14/11/2018
15/11/2018
05/12/2018
which have amend its draft decision. In this case we would ask you if you could send us the
Extension: 07/01/2019
amended draft decisions";
07/01/2019
(3) Partial disclosure
(3) "Although the GDPR does not require an "EU list", it does appear necessary that you have
Reason for partial disclosure in (2) and (3): different exceptions under art. 4 of
created a comparable list or overview in the context of the consistency mechanism. We would
Regulation 1049/2001 were applicable
also be very grateful to you if such a document could be made available to us".
Document(s) identified:57
(1) Full and partial disclosure
Any documents on:
(2) Full, partial, and full non disclosure
(1)  FATCA compatibility with the GDPR, and
Reason for partial and full non disclosure in (1) and (2): different exceptions
Case 8-2018
09/12/2018
10/12/2018
10/01/2019
under art. 4 of Regulation 1049/2001 were applicable
Extension: 31/01/2019
(2) Questionnaires on the OECD CRS
31/01/2019
Document(s) identified:74
Note:
The full non disclosure concerns all answers to OECD questionnaire regarding
CRS (47 documents in total)
(1) Who has submitted a request under art. 64(2) on the interplay between the GDPR and the
(1) No reference to the SA that submitted the request (simple reference to
ePrivacy Directive
"a SA")
Case 9-2018
11/12/2018
11/12/2018
11/01/2019
(2) A copy of the request
11/01/2019
(2) Full non disclosure
Reason for full non disclosure: one exception under art. 4 of Regulation
Document(s) identified:1
1049/2001 was applicable
Full, partial, and full non disclosure
Reason for partial and full non disclosure: different exceptions under art. 4 of
Regulation 1049/2001 were applicable
FATCA and CRS related documents which were discussed by the Financial Matters expert subgroup
Case 10-2018
18/12/2018
19/12/2018
21/01/2019
and during the 2nd and 5th plenaries
Notes:
Extension: 11/02/2019
11/02/2019
- The scope of this access to documents request is the same than in case 8-
Document(s) identified:73
2018 (except for one expert subgroup minutes not falling into the scope of
the request)
- The full non disclosure concerns all answers to OECD questionnaire
regarding CRS (47 documents in total)
Minutes of the preparatory meeting for the first plenary of the EDPB
Case 2019-01
30/12/2018
Request for further details: 07/01/2019
  Acknowledgement of receipt:  21/01/2019
11/02/2019
31/01/2019
Full disclosure
Document(s) identified:1
Page 1

Draft DPIA list from the Bulgarian SA
Case 2019-02
07/01/2019
10/01/2019
31/01/2019
31/01/2019
Full disclosure
Document(s) identified:1
A copy of the full text of EDPB opinion on DG Sante's questions, mentioned in EDPB's press release
Case 2019-03
25/01/2019
25/01/2019
15/02/2019
of 24 January 2019
01/02/2019
Full disclosure
Document(s) identified:1
Public comments made in context of the public consultation on Annex 1 of EDPB Guidelines
4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection
Case 2019-04
25/01/2019
28/01/2019
18/02/2019
Extension:11/03/2019
Regulation (2016/679)
05/03/2019
Full disclosure
Document(s) identified:18
Document submitted by DG Sante to EDPB on "Questions and answers on the interplay between
Case 2019-05
20/02/2019
21/02/2019
14/03/2019 Extension:
the Clinical Trials Regulation and the GDPR"
Extension requested
04/04/2019
on 14/03/2019
Withdrew request on 15/03/2019
Document(s) identified:1
Public comments made in context of the public consultation on Annex 1 of EDPB Guidelines
Case 2019-06
20/02/2019
28/02/2019
21/03/2019
4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection
05/03/2019
Full disclosure (same documents as request 2019/04)
Regulation (2016/679)
(1) A list of lobby meetings held by the European Data Protection Board with Google or its
intermediaries, including the attendees, date, and issues discused.
(2) Minutes and other reports of these meetings;
(3) All correspondence including attachments (i.e. any emails, correspondence or telephone call
Partial disclosure
notes) between the European Data Protection Board and Google or any intermediaries
Case 2019-07
07/03/2019
13/03/2019
03/04/2019 Extension:
The reasons for the partial disclosure were: the information in the documents
29/04/2019
representing its interests.
26/04/2019
falls outside the scope of the request or the exceptions of Art. 4(1)(b) and
(4) All documents prepared for the purpose of the meeting and/or exchanged during the course of
4(3)(1) were applicable.
the meeting
Documents identified:5
(1) A list of all lobby meetings held by this EU body with Facebook or its intermediaries. The list
should include: date, individuals attending and organisational affiliation, as well as the issues
(1) Partial disclosure
discussed;
(2) Full and partial disclosure
(2) All minutes and other reports of these meetings;
(3) Partial disclosure
(3) All correspondence, including attachements (i.e. any emails, correspondence or telephone call
(4) Partial disclosure
Case 2019-08
07/03/2019
13/03/2019
03/04/2019 Extension:
29/04/2019
notes) between this EU body (including the Director and the Cabinet) and Facebook or any
26/04/2019
intermediaries representing its interests; and
The reasons for the partial disclosure were: the information in the documents
(4) All documents prepared for the purpose of the meeting and/or exchanged during the course of
falls outside the scope of the request or the exceptions of Art. 4(1)(b) and
the meeting.
4(3)(1) were applicable.
Documents identified:10
Note: the full disclosure concerns the minutes of the meeting with Erin Egan.
Draft guidelines on PSD2 and GDPR
Non-disclosure
Case 2019-09
25/03/2019
28/03/2019
23/04/2019
23/04/2019
Reason for: doc not yet finalised. Article 4(3)(1) of Regulation 1049/2001
Documents identified:1
applies.
(1) Lastest draft DPIA blacklists of Denmark, Estonia, Finland, France, Germany, Latvia, Lithuania,
Norway, Poland, Spain, Sweden, UK
Case 2019-10
28/03/2019
04/04/2019
30/04/2019
(2) Draft DPIA whitelist of those countries
30/04/2019
(1) Full disclosure (comment: DPIA lists amended after EDPB opinion)
(2) No documents identified
Documents identified:12
1) Documents related to the cross-border cases started under GDPR, including which national data
protection board is leading each case under the one-stop-shop regime, and which companies are
subject to these investigations.
2) Documents related to the minutes of the regular meetings of the European Data Protection
Case 2019-11
15/04/2019
17/04/2019
14/05/2019
Extension: 06/06/2019
Board, with particularly reference to steps taken around cross-border investigations.
06/06/2019
3) Documents related to the involvement of the UK's Information Commissioner's Office in the
EDPB following the UK's departure from the European Union.
Document(s) identified: 155
Minutes of the 2nd, 3rd, 4th, 5th, 6th, 7th, 8th and if already available 9th Meetings of the EDPB
Partial and full non-disclosure
Case 2019-12
18/04/2019
24/04/2019
17/05/2019
Document(s) identified: 8
17/05/2019
Reason for the partial disclosure: several exceptions of Art. 4(1)(b) and 4(3)(1)
were applicable.
All working papers and other information that address the GDPR and its application to Bitcoin and
Full and partial disclosure
Case 2019-13
22/04/2019
24/04/2019
17/05/2019
other crypto currencies.
17/05/2019
The reasons for the partial disclosure were: the information in the documents
falls outside the scope of the request or the exceptions of Art. 4(1)(b) and
Document(s) identified: work in progress
4(3)(1) were applicable.
The expected or already existing impacts Brexit had so far on the EDPB's tasks and on the
cooperation with the UK
Case 2019-14
26/04/2019
02/05/2019
24/05/2019
Extension: 19/06/2019
after the Brexit
19/06/2019
Documents identified: 49
Full discloure, Partial and full non-disclosure
Page 2

Case 2019-15
26/04/2019
02/05/2019
24/05/2019
Extension: 19/06/2019
Open source - closed source
19/06/2019
Full disclosure, partial and full non-disclosure
Case 2019-16
26/04/2019
02/05/2019
24/05/2019
Carbon footprint
24/05/2019
No documents identified
1) For 2017-18-19: Staff and budget for Transparecy Unit (or department dealing with access
request)
(1) No documents identified
Case 2019-17
03/05/2019
08/05/2019
03/06/2019
2) For 2016-17-18: documents containing data on the handling of access to documents
03/06/2019
(2) Full and partial disclosure: the partial disclosure affected one document,
as some parts fell out of scope of the request
Documents identified: 4
1) The list of topics in IMI
2) Copy of guidance provided to SAs on how to choose topics
Case 2019-18
20/05/2019
24/05/2019
19/06/2019
3) List of items for each field on IMI
19/06/2019
(1) and (3) Full disclosure
* AtD and also AtInformation (answer in the same mail):
(2) No documents identified
-. Whether the EDPB plans to provide guidance on 2)
1) The full "mission report" of the EDPD mission to San Francisco, Silicon Valley and Napa Valley
Case 2019-19
03/06/2019
07/06/2019
01/07/2019
(US) from November 6-12, 2018 and all meeting minutes and other documents related to the
Extension: 22/07/2019
19/07/2019
mission
2)Board meeting minutes, reports and all other e-mails and documents, including the entry to the
Common Market Information System, relating to Facebook's "be on the lookout" internal
information system, as referred to the EDPB by the Hamburg DPA.
Case 2019-19
CONFIRMATORY
19/07/2019
24/07/2019
14/08/2019
Extension: 05/09/2019
05/09/2019
Full list of speaking engagements, meetings and media interviews of EDPB Chair Andrea Jelinek in
Partial disclosure
Case 2019-20
03/06/2019
07/06/2019
01/07/2019
2018 and 2019
01/07/2019
The reasons for the partial disclosure were: the information in the documents
falls outside the scope of the request or the exception of Art. 4(1)(b) was
Documents identified: 2
applicable.
1) LIBE's request to the EDPB
2) Any answer given by the EDPB to LIBE, and/or minutes from the EDPB meeting regarding this
Full and partial disclosure
Case 2019-21
07/06/2019
12/06/2019
03/07/2019
matter.
03/07/2019
The reasons for the partial disclosure were: exceptions of Art. 4(1)(b) and
Documents identified: 3
4(3)(2) were applicable.
First e.mail:
Ombudsperson case
Case 2019-22
14/06/2019 -
Clarification:
01/07/2019
22/07/2019
Extension: 12/08/2019
12/08/2019
Full non-disclosure
Reason for: exceptions 4(1)(b) and 4(2)(3rd) applied.
21/06/2019
Documents identified: 2
ICO fines that are given to the EU budget
Case 2019-23
08/07/2019
11/07/2019
01/08/2019
01/08/2019
No documents found
List of the companies that have received fines and sanctions due to the theft of customer data.
Adding their country of origin and during the last 10 years (2009, 2010, 2011, 2012, 2013, 2014,
Case 2019-24
08/07/2019
15/07/2019
05/08/2019
2015, 2016, 2017, 2018, 2019).
05/08/2019
No documents found
Case 2019-25
11/07/2019
17/07/2019
07/08/2019
Extension: 29/08/2019
Draft DPIA lists of 25 countries
28/08/2019
Full disclosure
All internal and external communication, working papers and other information that address the
Case 2019-26
15/07/2019
19/07/2019
09/08/2019
Extension: 02/09/2019
GDPR and its application to data collected in vehicles, either by the manufacturers' own or third-
02/09/2019
party software.
Case 2019-27
25/07/2019
01/08/2019
23/08/2019
Extension: 13/09/2019
DK SCC
13/09/2019
Full disclosure
Partial and full non-disclosure
Case 2019-28
29/07/2019
05/08/2019
27/08/2019
Extension: 17/09/2019
OSS cases
Pending
Reason for the partial disclosure: several exceptions of Art. 4(1)(b) and
4(2)3rd intend were applicable.
Case 2019-29
02/08/2019
07/08/2019
//
26 Consistency Opinions
07/08/2019
Applicant was given link to EDPB website
Case 2019-30
14/08/2019
23/08/2019
13/09/2019
DK SCC
13/09/2019
Full disclosure
Case 2019-31
26/08/2019
30/08/2919
20/09/2019
1) Facial recognition guidelines,2) Minutes of July 2019 Plenary
20/09/2019
Case 2019-32
11/09/2019
18/09/2019
09/10/2019
Extension: 30/10/2019
Model for calculating fines from the DE SA
28/10/2019
Full disclosure
Case 2019-33
13/10/2019
18/10/2019
11/11/2019
Minutes and documents adopted in last two Plenaries
11/11/2019
Full, partial, and full non disclosure
Case 2019-34
13/10/2019
Request for further details: 18/10/2019
Pending
Article 29 Working Party Annual Reports (17th-20th) covering years
2013-2016
Case 2019-35
23/10/2019
30/10/2019
20/11/2019
Topical data and figures on the level of budget and number of staff of
Extension: 11/12/2019
data protection authorities in EU Member States, emerging from your DPA
11/12/2019
survey of supervisory authorities mentioned in your latest annual report
of 2018 (p. 21).
Page 3

Partial disclosure
Case 2019-36
30/10/2019
31/10/2019
22/11/2019
Extension: 13/12/2019
Replies to public consultation for guidelines on article 6(1)(b) guidelines
13/12/2019
Reasons for the partial disclosure: exception of Art, 4(1)(b) was applicable to
some parts of some of the documents.
Partial disclosure
Case 2019-37
05/11/2019
08/11/2019
29/11/2019
Replies to public consultation for guidelines on article 6(1)(b) guidelines
03/12/2019
Reasons for the partial disclosure: exception of Art, 4(1)(b) was applicable to
some parts of some of the documents.
According to Article 12 section 8 GDPR, the Commission shall be empowered to adopt delegated
acts in accordance with Article 92 for the purpose of determining the information to be presented
by the icons and the procedures for providing standardised icons.
According to Article 70 section 1 pt r GDPR, the European Data Protection Board shall provide the
Commission with an opinion on the icons referred to in Article 12(7).
Please kindly provide me with the following information:
Case 2019-38
06/11/2019
08/11/2019
29/11/2019
• Is the European Data Protection Board (or previously the Article 29 Working Party) involved int
the process of drafting such standardized icons by the Commission;
29/11/2019
• Has the European Data Protection Board  (or previously the Article 29 Working Party) prepared
any statements, opinions or other documents, regarding standardized icons
• Is the European Data Protection Board  (or previously the Article 29 Working Party) in the
possession of any documents, regarding standardized icons, such as research papers, expert
opinions, etc.
Please also kindly provide me with copies of such documents.
2019-39
16/12/2019
19/12/2019
23/01/2020
Summary of the submissions of the public consultation for the guidelines on article 6(1)(b).
23/01/2020
Page 4