4 minute read

4 Structure of the binding decision

two or more national supervisory authorities 15. It is not aiming to address directly any third party. However, as the decision adopted by the EDPB shall be binding on the LSA in this case and can be decisive for the outcome of the procedure at national level, it may affect the interests of persons who were part of the procedure that gave rise to the draft decision, such as the controller who is addressed by the final decision of the LSA 16 .

18. In order to address the possibility that WhatsApp IE might be adversely affected by the EDPB decision, the EDPB assessed if it was offered the opportunity to exercise its right to be heard in relation to the procedure led by the LSA and in particular whether WhatsApp IE was given the opportunity to make its views effectively known in relation to the subject matter of the dispute to be resolved by the EDPB, as well as all documents received in this procedure to be taken into account by the EDPB to take its decision 17 .

Advertisement

19. Considering that WhatsApp IE has been heard by the IE SA in relation to the subject matter of the dispute to be resolved by the EDPB, as well as all documents received in this procedure and used by the EDPB to take its decision, including the objections raised in relation to the draft decision 18 , and the LSA has shared with the EDPB the written observations of WhatsApp IE, in line with Article 11(2) EDPB Rules of Procedure 19, in relation to the issues raised in this specific Draft Decision, the EDPB is satisfied that the Article 41 of the EU Charter of fundamental rights has been respected.

4 STRU CTU RE OF TH E BIND IN G DEC IS I ON

20. For each of the objections raised, the EDPB assesses first whether they are to be considered as a relevant and reasoned objection within the meaning of Article 4(24) GDPR as clarified in the Guidelines on the concept of a relevant and reasoned objection 20 .

21. Where the EDPB finds that an objection does not meet the requirements of Article 4(24) GDPR, the EDPB does not take any position on the merit of any substantial issues raised by that objection in this specific case. The EDPB will analyse the merits of the substantial issues raised by all objections it deems to be relevant and reasoned 21 .

15 Guideline s on Art. 65(1) (a), paragraph 97. 16 Guideline s on Art. 65(1) (a), paragraphs 98;99. 17 See also Guidelin es on Art. 65(1)(a), paragraphs 105; 106. I n this regard, it was confirme d that WhatsApp IE was afford ed its right to be heard against the Preliminary Draft decision, the Suppleme ntal Draft decision, the objections and comm ents rais ed by the CSAs, IE SA s Compo site R espons e, the com ments exchanged by the CSA s in response to it, and a provisi onally amended extract of Par t I of the IE SA s Draft De cisio n. The IE SA confirm ed it took account of WhatsApp IE s submis sions on the Preli minary Draft decis ion and on the Supplemental Draft Deci sion in the proces s of co nsolidating them into the Co mposite Draft. A copy of the Composit e Draft was provided to WhatsApp IE on 24 Dec embe r 2020. Within its submis sions in re sponse to t he material that would be put to the EDPB for the purpose of the pre sent Articl e 65 GDPR proc edure, WhatsA pp IE included also its additional submission s in relation to the Composite Draft. In a letter dated 9 June 2021, WhatsApp IE explicitly confirm ed that WhatsApp IE was af forded the opportunity to submit its v ie ws on the Co mposite Draft. 18 Guideline s on Art. 65(1) (a), paragraph 105. 19 EDPB Rules of Pro cedure, ad opted on 25 May 2018, as last modified and adopted on 8 October 2020. 20 EDPB Guidelines 9/20 20 on the concept of relevant and reasoned objection, ver sion 2 adopted on 9 March 2021, (her einafter, Guidel ines on RRO ). 21 See EDP B Guideline s 03 /202 1 on the application of Artic le 65(1) (a) GDPR, adopted on 1 3 April 20 21 ( ver sio n for public consultation) (here inafter, Guidelines on Art. 65(1)(a) ), paragraph 63 ( Th e EDPB will as sess, in relation to each objection raised, whether the objection meets the requirements of Article 4(24) GDPR and, if so, address the merits of the objection in the binding decision. )

This article is from: