Educational establishments must follow the respective legislative requirements and the stated data protection principles in handling data.
A second section in the 29WP guidelines includes a list of common criteria intended to be used by data protection authorities when handling appeals for search de-listing requests that have been refused by search engines.
This includes: purpose limitation; rigorous evidence based arguments; the principles of necessity and proportionality; stringent data protection safeguards, especially when handling sensitive personal data; independent data protection oversight; and, of course, full compliance with EU law and the EU treaties".
In its four-month update since GDPR the regulator also notes that European data protection authorities are currently handling and co-operating to investigate more than 200 cross-border complaints.
Zuckerberg's remarks suggest there will indeed be some discrepancies in how it handles data protection for different users — what those differences will be remains to be seen.
In Europe, Facebook is being audited by Irish data protection officials for its handling of customer information.
Regarding the specifics of the WP29's appeals criteria, it says it has agreed to establish a network of "dedicated contact persons" in order to develop common case-handling criteria so that data protection authorities can deal with complaints consistently.
The forthcoming WP29 guidelines on implementing the search de-listing ruling will include a list of 13 main "common criteria" which data protection authorities can use to handle appeals where a search de-listing request has been refused.
Trial findings stored on a computer will be stored in accordance with local data protection law and will be handled in strictest confidence.
Patient data discussed in consilia must be handled according to data protection laws.
Quality domains assessed included allocation sequence generation, allocation concealment, blinding of outcome assessors, completeness of participant follow-up, handling of incomplete outcome data, protection against selective outcome reporting and contamination.
