WP29
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
WP29 - Article 29 Working Party; its DPIA guidelines (revised 4 October 2017) cite systematic monitoring of employees as likely to require a DPIA.
In the CIPP/E body of knowledge, WP29 comes up under Ch 14.6.4 - Necessity; Ch 7.2.1 - Consent; Ch 8.1.2-8.1.3 - Articles 13 & 14.
WP29 in context
- The WP29/EDPB treat paragraph (1) and paragraph (2) information as equal in status, so both sets must be provided unless an exemption applies. (Article 13 vs Article 14 - what must be provided)
- The WP29 stresses 'provide' means controllers must ==actively furnish or direct== subjects to the information - they must not have to hunt for it among T&Cs. (How information must be provided (manner and format))
- The WP29 reads this as a duty on whoever places the cookie to obtain ==prior informed consent==: information first, then consent before the cookie is set or read. (Requirements of the ePrivacy Directive)
Where WP29 is covered in the CIPP/E study notes
- Consent - definition and the four conditions
- Article 13 vs Article 14 - what must be provided
- Necessity and the DPIA
- Reference · EDPB & WP29 guidelines and opinions (must-knows)
Related terms
- Consent
- EDPB
- Data subject
- Article 13
- Article 14
- Data protection officer (DPO)
- DPIA
- Automated processing
Test yourself on WP29
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.