Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.
| Who | Country | What they wrote |
|---|---|---|
| Gesellschaft für Datenschutz und Datensicherheit (GDD) e.V. | DE | Verantwortlichen in die Datenverarbeitung der jeweils anderen Verantwortlichen, mit denen eine gemeinsame Verantwortlichkeit nach Art. 26 DS-GVO besteht, was eine pauschal gesamtschuldnerische Haftung unverhältnismä- ßig erscheinen lässt. Deswegen würde z.B. e ↗ |
| Confederation of Swedish Enterprise | SE | both the means and purposes of processing. It should be clarified that the act of determining in the sense of Art. 26 GDPR requires the ability to have actual and decisive influence on a processing activity to establish joint controllership. It should be consi ↗ |
| Observatorio Internacional de Derechos Humanos del Ilustre y Nacional Colegio de Abogados de México | ME | (art. 20, Ley no 41/VIII/2013, de 17 de septiembre, de Protección n de Datos Personales de las Personas Fís sicas). • Colombia (Art. 26 de la Ley 1581 de 2012). • Ecuador (arts. 55 a 61 de la Ley Org ánica de Protección n de Datos Personales). • Méxxico ( ↗ |
| ANITEC-ASSINFORM | IT | c. Joint Controllership: Art. 26 should provide clarity on the delineation of the joint controllership concept and therefore ensure legal certainty. Art. 26 requires joint controllers to determine both the means and purposes of processing. It should be clarifi ↗ |
| Verband der öffentlichen Wirtschaft und Gemeinwirtschaft Österreichs (VÖWG) | AT | gende Anmerkungen möchte der Verband einbringen: ErwG 26: Für die Fälle (welche vor allem bei Joint-Controller-Vereinbarungen iSd Art. 26 auftreten), dass die übermittelnde Stelle personenbezogene Daten vor Übermittlung pseudonymisiert und somit diese personen ↗ |
| Bitkom e.V. | DE | yet established itself as the market standard due to mentioned challenges. Turning to joint controllership responsibilities under Article 26 Subsection 3 GDPR, a relevant factor for assessment should be the practical ability to influence arrangements. This rec ↗ |
| World Federation of Advertisers | BE | the provisions in DSA Article 26(3) on not presenting advertising based on profiling using sensitive personal data. Guidelines on this issue should also take account of the case law of the Court. • The interplay of the GDPR provisions on processing and the dat ↗ |
| ZKI e.V. | DE | n wird. Im Falle einer gemeinsamen Verantwortlichkeit sollte auf die gesetzlich zwingende Notwendigkeit einer Vereinbarung nach Art. 26 DSGVO verzichtet werden. Verantwortliche sind bereits aus eigenem Interesse und wegen der drohenden gesamtschuldnerischen ↗ |
| Die Deutsche Kreditwirtschaft | DE | igations. - The characteristic of "joint determination of the means and purposes" for categorisation as "joint responsibility" in Art. 26 GDPR is very generic. It is therefore proposed to define the categories of joint processing more clearly by going beyond t ↗ |
| Finnish Energy | FI | he 'reason relating to their particular situation.' Controller and processor (Chapter IV) Interpreting joint controllership under Article 26 has posed various challenges for businesses, especially for group companies. For group companies that share a common cu ↗ |
| Délégué à la Protection des Données (ancien et formateur) | FR | pléter le contrat prévu par l’article 28 RGPD entre un responsable de traitement et son sous-traitant et « l’accord » prévu par l’article 26.1. ↗ |
| Border Violence Monitoring Network | DE | ries who participated in “determining the purposes and means of processing”, should be regarded as joint controllers, pursuant to Article 26 of the EUDPR, and bear shared responsibility for the data protection breaches. This would prevent any responsibility ga ↗ |
| noyb | AT | Board must be specific enough that the lead authority can clearly determine the required contents of a legally binding decision. Article 26 - Procedure The Board can further specify procedural rules in its rules of procedure adopted according to Article 72(2 ↗ |
| International Society for Biological and Environmental Repositories (ISBER) | US | 85 EDPS, A Preliminary Opinion supra note 59. 86 See GDPR, art. 26(1). 87 Id. at art. 26(2). 88 Id. at art. 26(3). 25 legal act under Union or Member State law, that is binding on the processor with regard to the controller and that sets out the subject-ma ↗ |
| Gesamtverband der Deutschen Versicherungswirtschaft e.V. | DE | criminal offences in the insurance business (Art. 10 GDPR, see section 2.b), p. 6 et seq.) clear rules on joint controllership (Art. 26 GDPR, see sec- tion 2.c), p. 7 et seq.) legal certainty with regard to the transfer of data to third countries (Art. 46 ↗ |
| Federation of Austrian Industries (Industriellenvereinigung) | AT | ifference between these two definitions exactly is. A clearer differentiation between “Design” and “Default” would be helpful. g. Art 26 – Joint controllers The processing of data as joint controllers is regulated merely in general terms and could therefore be ↗ |
| Information Technology and Innovation Foundation (ITIF) | US | ity, and among other things, it entitles the authorities to evaluate, inspect, and supervise a firm’s cybersecurity. Furthermore, Article 26 of CSL provides that companies providing services on telecom networks and the Internet must provide user information to ↗ |
| Internet Corporation for Assigned Names and Numbers | US | data processing agreements, detailed requirements for the content of joint controller arrangements are missing. Art. 26 GDPR only states that joint controllers “shall in a transparent manner determine their respective responsibilities for compliance with the o ↗ |
| Multi-Regional Clinical Trials Center of Harvard University and Brigham and Women’s Hospital | US | 85 EDPS, A Preliminary Opinion supra note 59. 86 See GDPR, art. 26(1). 87 Id. at art. 26(2). 88 Id. at art. 26(3). 25 legal act under Union or Member State law, that is binding on the processor with regard to the controller and that sets out the subject-ma ↗ |
| EFPIA | GB | 95/46/EC, Art. 12. GDPR, Art. 15 (access) and 20 (portability). xxi Id. Art. 25(2) Directive 95/46/EC and Art. 45 GDPR. xxii Id. Art. 26(2) Directive 95/46/EC and Art. 46 GDPR. xxiii Id. Art. 26(1) Directive 95/46/EC and Art. 49 GDPR. xxiv Id. Art. 25(2) Dire ↗ |
| Federation of German Consumer Associations (Verbraucherzentrale Bundesverband e.V. - vzbv) | DE | bject by the joint con- trollers in cases where responsibility for data processing is shared is indeed provided, the word- ing of Art. 26 (1) sentence 2 GDPR should explicitly state that the controllers are obliged to coordinate their information in such a way ↗ |
| McAfee | BE | follows, therefore, is a consideration of possible changes and updates to the SCCs to bring them into line with GDPR. Pursuant to Article 26 of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 ‘on the protection of individual ↗ |
Source: public consultation submissions and position papers. n = 22 mentions; counted as a literal reference to the article number.