DPA guidance

The Bavarian Data Protection Authority released new guidance on joint controllership under GDPR Article 26. This document clarifies the roles and responsibilities when two or more entities jointly determine the purposes and means of processing personal data. It aims to alleviate concerns and provide practical recommendations, emphasizing the legal necessity of a transparent agreement delineating each party’s obligations. This guidance helps entities navigate the complexities of shared data responsibilities, enhancing accountability and transparency in data processing activities.