IDPC Publications

EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law

EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law 15 April 2025 During its April 2025 plenary, the European Data Protection Board (EDPB) has adopted guidelines on processing of personal data through blockchain technologies. A blockchain is […]

15
Apr

IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure)

IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure) 11 April 2025 The IDPC has published a set of FAQs on the management of employee email Accounts once an employee leaves an organisation. When this happens, questions often arise regarding the appropriate management of their work email account. While employers have a legitimate interest […]

11
Apr

Commission sets course for Europe’s AI leadership with an ambitious AI Continent Action Plan

Commission sets course for Europe's AI leadership with an ambitious AI Continent Action Plan 09 April 2025 The European Commission has presented an AI Continent Action Plan to make Europe a global leader in AI, boost its innovation capabilities and encourage adoption. As set out by President von der Leyen at the AI Action Summit […]

09
Apr

Complaint regarding the unlawful processing and disclosure of personal data

Complaint regarding the unlawful processing and disclosure of personal data 07 April 2025 The Commissioner received a complaint regarding the unlawful processing and disclosure of personal data by the controller. The complainant alleged that the controller failed to update her residential address, resulting in the disclosure of her sensitive health data to third parties. She […]

07
Apr

IDPC official delivers educational talk on Personal Data Breaches

IDPC official delivers educational talk on Personal Data Breaches 24 March 2025 The Office of the Information and Data Protection Commissioner was recently invited by ISACA Malta Chapter to deliver an educational talk. The topic selected for this session was ‘Navigating Security Incidents that lead to Personal Data Breaches from a GDPR perspective’. As the […]

24
Mar

IDPC official addresses Employment 360 Conference

IDPC official addresses Employment 360 Conference 17 March 2025 The Office of the Information and Data Protection Commissioner took part in a panel discussion as part of the Employment 360 conference organised by Fenech and Fenech Advocates and Shireburn Software. Moderated by Dr Paul Gonzi and Ms Mikela Fenech Pace, this panel explored invaluable insights […]

17
Mar

EDPB adopts statement on the implementation of the PNR directive

EDPB adopts statement on the implementation of the PNR directive 14 March 2025 During its March Plenary, the EDPB has adopted a statement on the on the implementation of the passenger name record (PNR) directive.In its statement, the Board:- gives further guidance to the passenger information units on the necessary adaptions and limitations to the […]

14
Mar

Launch of Coordinated Enforcement Action on the Right to Erasure

Launch of Coordinated Enforcement Action on the Right to Erasure 11 March 2025 The Information and Data Protection Commissioner (IDPC) is pleased to announce its participation in the European Data Protection Board’s (EDPB) 2025 Coordinated Enforcement Framework (CEF). Following the CEF action on the right of access carried out in 2024, the CEF’s focus […]

11
Mar

IDPC as FRA and MSA under the AI Act

IDPC as FRA and MSA under the AI Act 07 March 2025 The coming into force of the Artificial Intelligence Act[1] ushers in a new era for legal certainty and for regulation in the field of innovative technology such as Artificial Intelligence (AI). The AI Act seeks to protect the fundamental rights and freedoms of […]

07
Mar

EDPB launches CEF 205 focusing on the right to erasure

EDPB launches CEF 205 focusing on the right to erasure 05 March 2025 The European Data Protection Board (EDPB) has launched its Coordinated Enforcement Framework (CEF) action for 2025. Following a year-long coordinated action on the right of access in 2024, the CEF's focus this year will shift to the implementation of another data protection right, […]

05
Mar

European Court rules that a data subject is entitled to an explanation as to how the decision was taken in respect of him or her

European Court rules that a data subject is entitled to an explanation as to how the decision was taken in respect of him or her 27 February 2025 According to a judgement delivered on 27 February 2025 by the European Court of Justice, a data subject is entitled to an explanation as to how the […]