Refusal by the European Data Protection Board to grant full public access to draft versions of its statement on international agreements including transfers

European Data Protection Board (EDPB) refused to grant full public access to draft versions of its statement on international agreements including transfers. The European Ombudsman was not convinced by the reasons put forward by the EDPB to refuse access.

The complainant asked the European Data Protection Board (EDPB) for public access to draft versions of its statement on international agreements including data transfers. Following a separate Ombudsman inquiry, the EDPB identified additional documents as falling under the complainant's request, however it refused access to these documents. In doing so, it invoked an exception provided for in the EU legislation on public access to documents, arguing that disclosure could undermine the decision-making process.

Based on an inspection of the documents, the Ombudsman was not convinced by the reasons put forward by the EDPB to refuse access, and proposed as a solution that the EDPB reassess the request and reconsider its decision to deny access to those documents falling within the scope of the complaint. 

The EDPB did not follow this solution proposal and invoked an additional exception for refusing access. As a consequence, the Ombudsman made a finding maladministration, and recommended that the EDPB disclose the documents. 

Read the Recommendation here

Comments

Editorial

Editorial
George Kazoleas, Lawyer

Top Stories

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Intellectual property: the figurative sign consisting of the phrase ‘RUSSIAN WARSHIP, GO F* *K yourself’ in Russian and English cannot be registered as an EU trade mark

Prohibiting contact between children and their mother in custody and contact rights case was unjustified (ECtHR)

ECtHR elects a new Vice-President of the Court and two new Section Presidents

A holding by purely financial investors in a law firm may be prohibited (CJEU)

European Data Protection Board clarifies rules for data sharing with third country authorities and approves EU Data Protection Seal certification

GDPR and rail transport: A customer’s gender identity is not necessary data for the purchase of a transport ticket