Recent CJEU Data Protection Decisions: Independence of the DPO

The case discussed is C453/21. Judgment - 09/02/2023 - X-FAB Dresden.

Aoife Coll and Shay Buckley discuss the level of independence that must be afforded to Data Protection Officers (DPOs) under the GDPR in the context of the CJEU judgment in X-FAB Dresden (case C- 453/21) and the results of the EDPB’s 2023 Coordinated Enforcement Action on the Designation and Position of DPOs.