EDPB publishes guidelines on interplay between DSA and GDPR

During its latest plenary session, the European Data Protection Board (EDPB) has adopted new guidelines on the interplay between the Digital Services Act (DSA) and the EU General Data Protection Regulation (GDPR). The guidelines aim to ensure a consistent application of both regulations, thereby providing legal certainty for online intermediary services, such as search engines and digital platforms.

The DSA is designed to create a safer online environment and protect fundamental rights. However, several of its provisions require the processing of personal data. The new guidelines explain how the GDPR applies in these contexts, specifically addressing areas such as notice-and-action systems for illegal content, recommender systems, and rules around online advertising, including children's privacy and safety, transparency, and the prohibition of profiling-based advertising using special categories of data. 

The EDPB's guidance also provides practical advice on how data protection and digital services authorities should cooperate to enforce the regulations. The guidelines are now open for public consultation, allowing stakeholders to provide feedback.

Training Announcement: Freevacy offers a range of independent data protection qualifications from IAPP and BCS. Our certified courses are available at foundation and practitioner levels and cover multiple legal jurisdictions, data protection operations management, and the implementation of complex privacy solutions in technical environments. Find out more.