<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p><font size="+1"><font face="Lucida Grande">this is a very useful recent opinion; I find the highlighted article summarized the guidance in a helpful way.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Stephanie Perrin<br>
</font></font></p>
<p><font size="+1"><font face="Lucida Grande"></font></font><br>
</p>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject: </th>
<td>[council] GDPR EPDP</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date: </th>
<td>Fri, 18 Jan 2019 09:55:22 +0100</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From: </th>
<td>Erika Mann <a class="moz-txt-link-rfc2396E" href="mailto:erika@erikamann.com">
<erika@erikamann.com></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:council@gnso.icann.org">council@gnso.icann.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<div dir="ltr"><span></span></div>
<div dir="ltr">All - Maybe helpful for your EPDP discussion’s. Keep in mind this document is released by the Belgian national DPA and not the European cross national board of DPAs. Nonetheless I assume that they will have discussed this with their colleagues
but I had no chance (yet) to check this.</div>
<div dir="ltr">Regards,</div>
<div dir="ltr">Erika <br>
<div><br>
</div>
<div>
<div style="line-height: 19px; padding: 0px; margin: 0px;">
<h4 style="padding: 0px; margin: 0px; display: inline;"><a href="https://www.lexology.com/r.ashx?i=6685664&l=88SJB9G" style="line-height: 19px; text-decoration: none;
background-color: rgba(255, 255, 255, 0);" moz-do-not-send="true">Belgium's
privacy watchdog publishes guidance on the notions of controller and processor</a></h4>
</div>
<div style="font-weight: bold; line-height: 19px;"><span style="background-color: rgba(255, 255, 255, 0);">CMS Belgium</span><a target="_blank" class="logclick ct_logo" href="http://www.cms-db.com/" style="text-align: center;
-webkit-text-stroke-color: rgba(0, 0, 0, 0); box-sizing:
border-box; text-decoration: none; height: 72px; position:
relative; -webkit-transform-style: preserve-3d;
transform-style: preserve-3d; border: 1px solid rgb(204,
204, 204); margin: 0px auto; background-color: rgba(255,
255, 255, 0); display: inline !important; outline: 0px
!important;" moz-do-not-send="true"><font color="#000000"><img alt="CMS Belgium logo" src="https://d2dzik4ii1e1u6.cloudfront.net/images/lexology/firm/new/14b37190-7685-41b2-bb3a-88070ed497a9/W350/20150313110547.png" style="box-sizing: border-box; border: 0px;
vertical-align: middle; max-height: 72px; max-width:
200px; padding: 10px; position: relative; top: 35px;
transform: translateY(-50%);" moz-do-not-send="true"></font></a></div>
<div class="gated-content" style="box-sizing: border-box;
-webkit-text-stroke-color: rgba(0, 0, 0, 0);">
<div id="article-attributes" class="article-attributes" style="box-sizing: border-box; margin: 1em 0px; float:
left; width: 345px;">
<span style="background-color:
rgba(255, 255, 255, 0);"><span class="article-jurisdictions" style="box-sizing:
border-box; font-weight: 700; margin-right: 3px;
padding-right: 5px; border-right-width: 1px;
border-right-style: solid; border-right-color:
rgb(204, 204, 204);"><a href="https://www.lexology.com/hub/belgium" style="box-sizing: border-box; text-decoration:
none; outline: 0px !important;" moz-do-not-send="true">Belgium</a> </span><span class="publication" style="box-sizing: border-box;">January
17 2019</span></span></div>
<div class="article-body clippable-element text-clippable
image-clippable" id="lex-article-body" data-integrity-check="E4A171C42D3BB50923D38A067E0425B5" data-content-slug="288f6355-21ac-40d8-99c3-64102b85c3e9" data-friendly-name="Belgium's privacy watchdog publishes
guidance on the notions of controller and processor" data-firm-ref="144" data-content-type="Article" style="box-sizing: border-box;">
<p style="box-sizing: border-box; margin: 0px 0px 10px;"><span style="background-color: rgba(255, 255, 255, 0);">Recently, the Belgian Data Protection Authority (“<a class="logclick ct_cont" target="_blank" href="https://www.dataprotectionauthority.be/" style="box-sizing: border-box; text-decoration:
none; border-bottom-width: 1px; border-bottom-style:
solid; border-bottom-color: rgb(223, 223, 223);
outline: 0px !important;" moz-do-not-send="true">DPA</a>”)
published guidance on controller and processor concepts (see original documents in <a class="logclick
ct_cont" target="_blank" href="https://www.autoriteprotectiondonnees.be/sites/privacycommission/files/documents/Notions_RT_ST.pdf" style="box-sizing: border-box; text-decoration:
none; border-bottom-width: 1px; border-bottom-style:
solid; border-bottom-color: rgb(223, 223, 223);
outline: 0px !important;" moz-do-not-send="true">French</a> and
in <a class="logclick ct_cont" target="_blank" href="https://www.gegevensbeschermingsautoriteit.be/sites/privacycommission/files/documents/Begrippen_VW_OA.pdf" style="box-sizing: border-box; text-decoration:
none; border-bottom-width: 1px; border-bottom-style:
solid; border-bottom-color: rgb(223, 223, 223);
outline: 0px !important;" moz-do-not-send="true">Dutch</a>),
refreshing the distinction between these two concepts and their implications.</span></p>
<p style="box-sizing: border-box; margin: 0px 0px 10px;"><span style="background-color: rgba(255, 255, 255, 0);">In view of recent questions about the qualification and concrete application of the concepts of controller and processor, the DPA has decided to
recap the principles and definitions applicable to these concepts.</span></p>
</div>
</div>
<br>
<div id="AppleMailSignature" dir="ltr">Sent from my iPhone</div>
</div>
</div>
</div>
</body>
</html>