0 P reface

The European Data Protection Board

Having regard to Article 70(1)(e) and (l) o f the Regulatio n 2016/679/ EU o f the Euro pean P arliament and o f the Co uncil o f 27 April 2016 o n the pro tectio n o f natural perso ns with regard to the pro cessing o f perso nal data and o n the free mo vement o f such data, and repealing Directive 95/46/ EC, (hereinafter GDP R ),

Having regard to the EEA Agreement and in particular to Annex XI and P rotoco l 37 thereo f, as amended by the Decisio n o f the EEA jo int Com m ittee No 154/ 2018 o f 6 July 20181 ,

Having regard to Article 12 and Article 22 o f its Rules of P ro cedure,

Having regard to the Article 29 Wo rking P arty Guidelines fo r identifying a co ntro ller o r pro cessor s lead superviso ry autho rity, WP244 rev.01,

Having regard to the EDPB Guidelines 07/ 2020 o n the co ncepts o f co ntro ller and pro cesso r in the GDPR,

HAS ADOPTED THE FOLLOWING GUIDELINES

0 P REFACE

1. On 5 April 2017, the Article 29 Wo rking P arty ado pted its Guidelines for identifying a co ntro ller o r pro cesso r s lead superviso ry autho rity (WP244 rev.01)2, which were endo rsed by the Euro pean Data P rotectio n Bo ard (hereinafter EDP B ) at its first P lenary m eeting3. This do cum ent is a slightly updated versio n o f tho se guidelines. Any reference to the WP29 Guidelines fo r identifying a co ntro ller or pro cesso r s lead supervisory autho rity (WP 244 rev.01) sho uld, from no w o n, be interpreted as a reference to these EDP B guidelines.

2. The EDP B has no ticed that there was a need fo r further clarificatio ns, specifically regarding the no tio n o f m ain establishment in the co ntext o f jo int co ntro llership and taking into acco unt the EDP B Guidelines 07/2020 o n the co ncepts o f co ntro ller and pro cesso r in the GDP R4 .

3. The paragraph co ncerning this m atter has been revised and updated, while the rest o f the document was left unchanged, except fo r edito rial changes. The revisio n co ncerns, m o re specifically, Sectio n 2.1.3 o n jo int co ntro llers.

1 Refe rence s to Me mber Stat es mad e throughout this document should be understood as ref erenc es to EEA Memb er State s . 2 Available at http://ec .europa.eu/new sroom /article 29/it em-detail.c fm ?ite m_id =611 235. 3 See https:/ /edpb.europa.eu/ news /new s/2 018/ endorse m e nt-gdpr-wp29-guidel ines-edp b_en. 4 See Guid eline s 07/2 020 on the concepts of controller and proces sor in the GDP R, ver sion 2.0 adopted on 7 July 2021, paragraphs 161, 162 and 166, available at https://edpb.europa.e u/our-work-tool s/ourdocuments/ guideline s/guidel i nes-0720 20-concepts-controll er-and-proc es sor-gdpr_en