108th Plenary meeting

I. Adoption of the minutes and of the agenda, Information given by the Chair 

I.1. Introduction

I.2. Minutes of the 107th EDPB meeting 

I.3. Draft agenda of the 108th EDPB meeting 

I.4. Brazilian Adequacy Decision

A. Agenda items for adoption 

A.1. Opinion Art. 64 (1) GDPR on the draft decision of the Irish DPA on the Controller Binding Corporate Rules (BCR-C) of Shopify 

A.2. Opinion Art. 64 (1) GDPR on the draft decision of the Irish DPA on the Processor Binding Corporate Rules (BCR-P) of Shopify 

A.3. Opinion Art. 64 (1) GDPR on the draft decision of the Luxembourgish DPA on the Controller Binding Corporate Rules (BCR-C) of Northern Trust 

A.4. Opinion Art. 64 (1) GDPR on the draft decision of the Luxembourgish DPA on the Processor Binding Corporate Rules (BCR-P) of Northern Trust 

A.5. Opinion Art. 64 (1) GDPR on the draft decision of the Norwegian DPA on the Controller Binding Corporate Rules (BCR-C) of Mowi 

A.6. Opinion Art. 64 (1) GDPR on the draft decision of the Luxembourgish DPA on the Controller Binding Corporate Rules (BCR-C) of Ferrero Group 

A.7. Reply to letter from the Computer & Communications Industry Association (CCIA) 

B. Agenda items for discussion 

B.1. Agenda items for discussion in view of adoption
B.1.1. Practical implementation of the Helsinki Statement 
B.1.2. Guidelines on the interplay between the GDPR and the Digital Services Act (DSA) 
B.1.3. Request for mandate to exchange on model contractual clauses from different regions or jurisdictions used to transfer data across borders 
B.1.4. Letter to the European Commission requesting extension for Opinions on the UK Adequacy Decision

B.2. Agenda items for discussion
B.2.1. Global Privacy Assembly 2025 

C. Organisational matters 

C.1. Appointment of the Coordinator for the International Engagement taskforce

C.2. EDPB representatives to the European Union Agency for Cybersecurity (ENISA) Advisory Group 

C.3. EDPB representative to the European Blockchain Sandbox 

D. Items for information 

D.2. Updates from EDPB participants

D.2.1. Update on the European Commission GDPR Implementation Dialogue 

D.2.2. Digital Markets Act (DMA) review 
D.2.3. Conclusion of EDPS investigation into use of Microsoft 365 by the European Commission 

D.3. Any other business