On 28 February, the European Data Protection Board
(EDPB) launched its Coordinated Enforcement
Framework (CEF) action for 2024. This year, the
Luxembourg data protection authority (Commission nationale pour
la protection des données, (CNPD)), as
well as 30 other data protection authorities
(DPAs), will focus their attention on the
implementation of the right of access by public and private
organisations.
For its third CEF action, the EDPB decided to prioritise the
right of access because it is one of the most commonly exercised
data protection rights and is the subject of many complaints to
DPAs.
In this context, it is important to understand (i) what CEF
actions consist of, (ii) what the right of access encompasses and
(iii) how organisations should implement this right in
practice.
