Abstract

The European Commission, with about a month’s delay, published a Communication to the European Parliament and the Council which constitutes the first report on the assessment and review of the GDPR required under Art. 97.1 GDPR. The Commission rightly points out that two years of application of the regulation is too short a period to properly evaluate this act, given that not all Member States have completed the process of adjusting local legal provisions to the GDPR. In the report, the Commission mainly presented the point of view of the „public party”, i.e. the national supervisory authorities, the Council of the European Union, the European Parliament and the EDPB. Much space has been devoted to the issues which, pursuant to Art. 97.2 GDPR, must be included in the report, i.e. data transfers to third countries and international organizations. There was no broader discussion of the first problems relating to the GDPR interpretation reported by administrators and data processors.