The European Data Protection Board (EDPB) has 162 cross border cases on its register, but no fines issued as yet.  It has also received 80,000 data breach notifications.

The European Data Protection Board (EDPB) has by now 162 cross-border cases on its case register, the Board’s Chair Andrea Jellinek said in Brussels today. She would not confirm when the first large fines would be issued – ‘we are investigating’ she said. When asked about a public register of fines, she said this would not be possible unless the details were anonymised. Under her native Austrian DP law, the authority has to anonymise any details if they publicise details of fines. 

Jellinek said that the first five months of the GDPR have been busy for the authorities. Some 80,000 breach notifications have been received by the 25 EU DPAs which have issued their statistics, and 15 One Stop Shop procedures have been started at the Board. In addition, there have been 233 procedures relating to Mutual Assistance between the DPAs.

The international DPA conference is currently taking place in Brussels hosted by the European Data Protection Supervisor. Jellinek said that she echoes the calls of one of the speakers, Tim Cook, Apple’s CEO, for a comprehensive US federal privacy law. She recently gave evidence in the US Senate on the GDPR. Jellinek said that the second annual review of the EU-US Privacy Shield will report in November. It was not yet certain whether the EDPB would issue an opinion.

Source:  Privacy Laws & Business,