During the period 9-10 April 2019 the Plenary of European Data Protection Board, body with legal personality, established based on Article 68 of the General Data Protection Board, took place

At this meeting, the European Data Protection Board adopted Guidelines no. 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects. According to the provisions of Article 6 (1) lit. (b), the processing is lawful if it is necessary for the performance of a contract to which the data subject is a part of or to take steps at the request of the data subject prior to the conclusion of a contract. The adopted document also contains concrete examples of application in specific situations of this condition of legitimacy of the processing.

The guideline is under the public consultation and proposals can be submitted.

Additional information is available at: https://edpb.europa.eu/news/news/2019/ninth-plenary-session-guidelines-processing-personal-data-context-information-society_en

Legal and Communication Department

ANSPDCP