EU Guarantors: Right of Access, the Results of CEF 2024

Purpose
The European Data Protection Board (EDPB) has adopted a report on the coordinated enforcement action on the implementation of the right to access, conducted through the Coordinated Enforcement Framework (CEF). The document synthesizes the results of the work done by 30 data protection authorities in the European Economic Area (EEA), including the Italian Garante. The purpose of this report is to identify challenges and provide recommendations for improving the implementation of the right to access.

Effects on Industry
The CEF report reveals a high level of compliance among data controllers regarding the exercise of the right to access, particularly in large organizations. Additionally, there has been an adoption of tools to facilitate access by individuals to their personal data, such as online forms and self-service systems for downloading personal data. However, the report also highlights areas for improvement, including the need to promote EDPB guidelines on the right to access and sensitize both data controllers and individuals about their respective obligations and rights.

Relevant Stakeholders
The Italian Garante has directed a questionnaire to around 60 data controllers, including primary private sector companies and medium-to-large-sized public entities. The responses, in aggregate form, have been included in the appendix of the EDPB report, which contains statistics and graphs. The results of this action are summarized in the national report.

Next Steps
The coordinated approach used for this action will pave the way for future collaborative work by EU Garantes on other data protection topics, starting with the CEF 2025 action, which will focus on the right to erasure. This highlights the importance of adopting a proactive and coordinated strategy in addressing emerging challenges in the field of data protection.

Any Other Relevant Information
The report’s findings and recommendations will contribute to shaping future policy decisions on data protection at the EU level. The CEF framework has been developed as a tool for improving the effectiveness of data protection enforcement across the EEA, demonstrating the commitment of EU authorities to enhancing the rights of individuals in this area.