Question:

What is the European Data Protection Board (EDPB)?

Answer:

The European Data Protection Board (EDPB) is a body established under Article 68 of the GDPR. It is composed of the heads of the member states’ supervisory authorities and the European Data Protection Supervisor (Article 68 (3) GDPR). If there are multiple supervisory authorities in a member state – as is the case in Germany, for example – that member state must appoint a representative. Germany has designated the Federal Commissioner for Data Protection and Freedom of Information as this representative in Section 17 (1) Sentence 1 of the Federal Data Protection Act (BDSG).

The EDPB’s task is to ensure the consistent application of the GDPR within the European Union. Numerous individual tasks are assigned to this purpose in Article 70 (1) GDPR. These tasks include, for example, under Article 70 (1) (k) “the development of guidelines for supervisory authorities on the application of measures pursuant to Article 58 (1), (2), and (3) and the imposition of fines pursuant to Article 83.”