Article 67 of the GDPR: Exchanges of information
Article 67 of the GDPR: Exchanges of information
Article 67 of the GDPR provides for the possibility of adopting implementing acts to regulate modalities for exchanging information between supervisory authorities, and between them and the European Data Protection Board (EDPS).
Article 67 of the GDPR explained
This article authorizes the European Commission to specify, by means of implementing acts, the practical conditions of:
- Electronic transmission of information between authorities;
- Standard formats to facilitate readability and conservation;
- Security of communication channels used for exchanges;
- Prompt notifications of cross-border incidents or investigations.
The objective is to ensure a fluidity and traceability of exchanges in the application of the GDPR.
Why is this article important for your GDPR compliance?
It guarantees that the authorities can cooperate effectively, which can indirectly impact your business, particularly in the event of coordinated investigations. Understanding this framework helps to anticipate the scope of controls and the information sharing between regulators.
How to comply with Article 67 of the GDPR?
- Keep your responses to authorities in standardized and accessible formats;
- Make your compliance documents available through secure channels;
- Prepare your internal tools for smooth communication with several European regulators;
- Stay informed of potential implementing acts adopted by the Commission.
Examples of application of Article 67 of the GDPR
- Use of interinstitutional platforms to manage a pan-European survey;
- Adoption of an encryption protocol to transmit procedural documents;
- Implementation of a common XML format to report a data breach to authorities.
Related Resources
Accelerate your compliance in just a few clicks
With our all-in-one solution, you can accelerate and ensure compliance easily:
- Automate your compliance with our GDPR software
- Supported or outsourced by our DPO experts
- Raise awareness among your teams with our GDPR training e-learning
Assess your situation in 15 minutes with our free, no-obligation GDPR self-diagnosis.