European Data Protection Board

EDPB plenaries, subgroups and taskforces

EDPB plenaries

The Members of the EDPB take decisions and adopt EDPB documents at EDPB plenary meetings.

During plenary meetings, the EDPB members also:

discuss developments or policy questions of significant strategic importance and decide on any action required
give mandates and directions to subgroups and taskforces
receive information and updates on the work of subgroups, taskforces or the EDPB Secretariat

More information about the functioning of the EDPB plenary meetings can be found in the EDPB Best practices for the organisation of EDPB Plenary meetings.

The plenary meetings take place either in person or remotely at least once per month:

Agenda Minutes

Subgroups and taskforces

Guidance, opinions, decisions, statements and letters are prepared in subgroups or taskforces.

Subgroups

Subgroups	Scope of Mandate
Borders, Travel & Law Enforcement (BTLE)	Law Enforcement Directive Cross-border requests for e-evidence Adequacy decisions under the LED and, with regard to access to transferred data by law enforcement and national intelligence under authorities in third countries, under the GDPR Passenger Name Records (PNR) Border controls
Compliance, e-Government and Health (CEH)	Codes of conduct, certification and accreditation Data Protection Impact Assessments and Data Protection by Design and by Default (in cooperation with the Technology ESG) Compliance with public law and eGovernment eHealth and European Health Data Space Processing of personal data for scientific research purposes Data Governance Act, Data Act Monitoring activities of the European Data Innovation Board (EDIB) through EDPB representatives
Cooperation (COOP)	General focus on cooperation and consistency mechanism under the GDPR and related legislative developments Guidance on Article 56 GDPR and certain provisions of Chapter VII GDPR, specifically procedural questions on Section 1 and 2, and the relevant provisions in the Procedural Regulation Guidance on the interpretation and application of the Procedural Regulation, such as relating to cooperation procedures (OSS, early resolution, Art 61 and 62 GDPR) (in cooperation with the Enforcement Expert Subgroup) Procedural questions relating to cooperation cases where there is no establishment in the EU International mutual assistance and other cooperation tools to enforce the GDPR outside the EU (Article 50 GDPR) (in cooperation with the International Transfers Expert Subgroup) Application of cooperation and consistency mechanism in connection to new EU legislations
Coordinators (COORD)	General coordination between the Expert Subgroup Coordinators Coordination on the EDPB Work Programme Ensuring harmonised working methods between subgroups
Corrective Powers (CPWR)	Guidance and harmonisation in relation to the imposition and calculation of administrative fines according to Article 83 GDPR Guidance on the application of the corrective powers referred to in Article 58(2) GDPR
Enforcement (ENF)	EDPB binding decisions Guidance on certain provisions of Chapter VII GDPR, specifically the practical application of the consistency mechanism (Articles 65 and 66 GDPR and relevant provisions of the Procedural Regulation) Guidance on the interpretation and application of the Procedural Regulation, such as relating to national enforcement or the EDPB consistency procedures (e.g., relevant and reasoned objections, Article 65, 66 GDPR) (in cooperation with the Cooperation Expert subgroup) Guidance on the application of Chapter VIII GDPR (in cooperation with the Corrective Powers Expert subgroup) Providing analysis to the Cooperation Expert subgroup on the basis of practical experiences Developing and proposing a coordinated enforcement strategy and coordinating the Coordinated Enforcement Framework Contribute to enhancing to the consistent enforcement of the GDPR, through the collection of decisions of DPAs as well as court judgments to produce “case law” style publications to help organisation to understand positions of DPAs in concrete cases Platform for sharing of information about enforcement activities, including practical questions by way of roundtables, national updates and workshops
Financial Matters (FMESG)	Application of data protection principles in the financial sector e.g. taxation, fight against financial crime, digital currency, payment services, credits, insurances, etc On a case-by-case basis, providing inputs to and cooperate with international or European financial institutions, authorities or organisations (e.g. ECB, ESMA, EBA, EIOPA, FATF, AMLA, etc.) Provide guidance on the interplay between the application of the GDPR and EU laws in the financial sector
International Transfers (ITS)	Chapter V GDPR (International transfer tools and policy issues), more specifically: European Commission Adequacy decisions Administrative arrangements between public authorities and bodies Codes of conduct and certification as transfer tools (in cooperation with the CEH ESG) BCRs and contractual clauses for transfers of personal data Article 48 GDPR (in cooperation with the BTLE ESG)
IT Users (ITUsers)	Developing and testing IT tools used by the EDPB with a practical focus: Collecting feedback on the IT system from users Adapting the systems and manuals Discussing other business needs including tele- and videoconference system
Key Provisions (KEYP)	Core concepts and principles of the GDPR, including Chapter I (e.g. scope, definitions like LSA and large-scale processing), Chapter II (main principles), Chapter III (e.g. rights of individuals, transparency), Chapter IV (e.g. DPO – in cooperation with CEH ESG, ENF ESG and TECH ESG) and Chapter IX
Social Media (SOCM)	Analysing social media services, conceived as online platforms that focus on enabling the development of networks and communities of users, among which information and content is shared and whereby additional functions provided by social media services include targeting, personalisation, application integration, social plug-ins, user authentication, analytics and publishing Analysing established and emerging functions offered by social media, including the underlying processing activities and corresponding risks for the rights and freedoms of individuals Developing guidance, recommendations and best practices in relation to both the offer and use of social media functions, in particular for economic or political reasons Digital Services Act Political advertising
Strategic Advisory (SAESG)	Strategic questions affecting the whole EDPB (including the discussion on the EDPB Strategy, the Work Programme, contributions to the evaluation of GDPR) Discuss documents for which legal deadlines are applicable (i.e. Art. 64(2), 65 and 66 procedures) Clarification of strategic-guidance on questions that could not be resolved in the ESGs or task forces Procedural rules and practices for the EDPB
Technology (TECH)	Technology, innovation, information security, confidentiality of communication in general Encryption Data breach notifications Data Protection Impact Assessments and Data Protection by Design and by Default (in cooperation with the CEH ESG) Emerging technologies, innovation and other challenges related to privacy: reflecting on data protection risks and opportunities of current and future technological developments AI Act
Cross-Regulatory Interplay and Cooperation (CIC)	Clarifying the links and build on synergies between the regulatory frameworks of data protection, competition and consumer protection law, including also the Digital Markets Act, in order to provide expertise and resources to support dialogue between Data Protection Authorities (DPAs) and other regulatory bodies and prepare common positions Providing expertise, exchange information and promote best practices as regards cross-regulatory governance and cooperation, in particular in the context of the implementation of the EU Digital rulebook

Taskforces

Taskforces	Scope of Mandate
Taskforce on Generative AI Enforcement	Serving as a platform for the exchange of information on investigations related to Generative AI cases in order to enhance cooperation between DPAs and ensure compliance with the GDPR Facilitating coordination of external communication by DPAs on enforcement activities concerning Artificial Intelligence Preparing a public report on the work undertaken by the taskforce
Taskforce on International Engagement	Strengthening exchanges between EDPB members as regards the participation in multilateral fora in the field of data protection and privacy (for instance, Council of Europe, Global Privacy Assembly, G7 Data Protection Authorities Roundtable, OECD, Spring Conference).