Vigia DPO Blog
Analysis of AEPD rulings, EDPB guidelines and regulatory criteria affecting the daily work of DPOs and privacy consultants in Spain and the EU.
-
GDPR data breach: what a DPO must do in the first 72 hours (notification checklist)
Deadline, minimum content and a first-72-hours checklist after a breach. What to notify the supervisory authority (Art. 33 GDPR), when to tell data subjects, and the per-client trail.
-
GDPR and the EU AI Act: what changes for a DPO in 2026
How GDPR and the EU AI Act overlap in 2026: the obligations timeline, the DPO's expanded role and the EDPB guidelines that change which clients are affected.