{"id":13237,"date":"2026-05-22T16:22:28","date_gmt":"2026-05-22T14:22:28","guid":{"rendered":"https:\/\/orsingher.com\/?p=13237"},"modified":"2026-05-22T17:04:17","modified_gmt":"2026-05-22T15:04:17","slug":"data-protection-edpb-approves-first-eu-data-protection-seal-for-data-transfers","status":"publish","type":"post","link":"https:\/\/orsingher.com\/it\/data-protection-edpb-approves-first-eu-data-protection-seal-for-data-transfers\/","title":{"rendered":"DATA PROTECTION | EDPB approves first EU data protection seal for data transfers"},"content":{"rendered":"<p>On 15 April 2026,\u00a0the European Data Protection Board (<strong><em>EDPB<\/em><\/strong>)\u00a0adopted\u00a0<a href=\"https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/opinion-board-art-64\/opinion-142026-europrivacy-certification-criteria_en\" target=\"_blank\" rel=\"noopener\">Opinion 14\/2026<\/a>\u00a0and\u00a0<a href=\"https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/opinion-board-art-64\/opinion-152026-europrivacy-certification-criteria_en\" target=\"_blank\" rel=\"noopener\">Opinion 15\/2026<\/a>\u00a0concerning the\u00a0Europrivacy\u00a0certification scheme, further advancing the operational use of certification mechanisms under the GDPR.<\/p>\n<p>Through\u00a0Opinion 14\/2026,\u00a0the EDPB approved version 82\u00a0of the\u00a0<a href=\"https:\/\/www.europrivacy.org\/en\/ep\/europrivacy-criteria\" target=\"_blank\" rel=\"noopener\">Europrivacy certification criteria<\/a>\u00a0(<em>the<\/em>\u00a0<strong><em>certification criteria<\/em><\/strong>)\u00a0as a European Data Protection Seal under\u00a0<a href=\"https:\/\/gdpr-info.eu\/art-42-gdpr\/\" target=\"_blank\" rel=\"noopener\">Article 42(5) GDPR<\/a>.\u00a0Originally\u00a0recognised\u00a0through EDPB\u00a0<a href=\"https:\/\/www.edpb.europa.eu\/system\/files\/2022-10\/edpb_opinion_202228_approval_of_europrivacy_certification_criteria_as_eu_data_protection_seal_en.pdf\" target=\"_blank\" rel=\"noopener\">Opinion 28\/2022<\/a>\u00a0as the first European data protection seal, the updated scheme now extends to controllers and processors\u00a0established\u00a0outside the EEA but subject to\u00a0<a href=\"https:\/\/gdpr-info.eu\/art-3-gdpr\/\" target=\"_blank\" rel=\"noopener\">Article 3(2) GDPR<\/a>,\u00a0including organisations offering goods or services to individuals in the EU or\u00a0monitoring\u00a0their behaviour. The updated criteria\u00a0further\u00a0introduce\u00a0additional\u00a0requirements concerning further processing assessments,\u00a0<a href=\"https:\/\/gdpr-info.eu\/art-27-gdpr\/\" target=\"_blank\" rel=\"noopener\">Article 27 GDPR<\/a>\u00a0representatives and legal assessments of third-country laws and practices affecting GDPR compliance.<\/p>\n<p>In parallel,\u00a0through Opinion 15\/2026, the EDPB recognised\u00a0Europrivacy, for the first time, as a certification mechanism that may be used as\u00a0international data transfers under Articles 42 and\u00a0<a href=\"https:\/\/gdpr-info.eu\/art-46-gdpr\/\" target=\"_blank\" rel=\"noopener\">46 GDPR<\/a>.\u00a0The scheme is specifically addressed to non-EEA data importers not directly subject to the GDPR and may serve as an \u201c<em>appropriate safeguard<\/em>\u201d for international\u00a0transfers, provided that binding and enforceable commitments are undertaken by the importer. The transfer-oriented criteria require organisations\u00a0to,\u00a0<em>inter alia<\/em>: (a)\u00a0map data flows,\u00a0(b)\u00a0identify\u00a0onward transfers;\u00a0(c)\u00a0conduct\u00a0Transfer\u00a0Impact\u00a0Assessments (TIAs); (d)\u00a0assess third-country legislation;\u00a0and\u00a0(e)\u00a0implement supplementary safeguards where necessary. The EDPB clarified that certification\u00a0remains\u00a0voluntary and does not exempt organisations from broader GDPR accountability obligations or supervisory scrutiny.<\/p>\n<p>Newsletter n. 118 &#8211; May 2026<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On 15 April 2026,\u00a0the European Data Protection Board (EDPB)\u00a0adopted\u00a0Opinion 14\/2026\u00a0and\u00a0Opinion 15\/2026\u00a0concerning the\u00a0Europrivacy\u00a0certification scheme, further advancing the operational use of certification mechanisms under the GDPR. Through\u00a0Opinion 14\/2026,\u00a0the EDPB approved version 82\u00a0of the\u00a0Europrivacy certification criteria\u00a0(the\u00a0certification criteria)\u00a0as a European Data Protection Seal under\u00a0Article 42(5) GDPR.\u00a0Originally\u00a0recognised\u00a0through EDPB\u00a0Opinion 28\/2022\u00a0as the first European data protection seal, the updated scheme now extends [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[28],"tags":[],"class_list":["post-13237","post","type-post","status-publish","format-standard","hentry","category-newsletters"],"acf":[],"_links":{"self":[{"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/posts\/13237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/comments?post=13237"}],"version-history":[{"count":0,"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/posts\/13237\/revisions"}],"wp:attachment":[{"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/media?parent=13237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/categories?post=13237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/orsingher.com\/it\/wp-json\/wp\/v2\/tags?post=13237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}