On October 8th and 9th, 2019, the European Data Protection Board (“EDPB“), which is the EU body in charge of the application of the General Data Protection Regulation (“GDPR) and consists of a representative of each EU DPA and of the European Data Protection Supervisor (EDPS), met for its fourteenth plenary session and:
– adopted the final version of Guidelines on the lawful basis for processing for online services based on contracts (Art. 6 (1) (b), The EDPB adopted a final version of the guidelines on the scope and application of Article 6(1)(b) GDPR in the context of information society services. The Guidelines deal with scope and application of Article 6(1)(b) GDPR in the context of information society services, as well guidance on the applicability of Article 6(1)(b) in case of bundling of separate services and termination of contract.
– discussed other miscellaneous topics, i.e. Article 64 Opinion on Equinix BCRs, submitted to the Board by the UK DPA, the ICO, further steps in a renegotiation of draft PNR (Passenger Name Records ) agreement with Canada, a response to Council Working Party on Sports Anti-Doping Code (WADA).
see here: https://edpb.europa.eu/news/news/2019/european-data-protection-board-fourteenth-plenary-session_en