Thread by @gabrielazanfir

I see a bit more interesting interaction between data protection rules and the #DigitalMarketsAct. Two points: (1) the obligation for gatekeepers to refrain from combining personal data from any other services offered by the gatekeeper or w PD from 3rd-party services, unless 1/

"unless the end user has been presented with the specific choice and provided consent in the sense of the GDPR" (Art. 5(a) of the proposal). And 2) the obligation for gatekeepers to submit to COM an annual independent audit w a description of the user profiling techniques 2/ #DMA

There are also data sharing obligations with third parties, including personal data, which are quite interesting. In fact, one of them speaks of "continuous and real time access" offered to business users (Art. 6(1)(i)) #DSA 3/

It's interesting also that the Commission may "request access to data bases and algorithms of undertakings and request explanations on those by a simple request or by a decision." 4/I'll keep the thread open in case something else pops up #DSA

I count this as news, based on recent developments: there will be no additional Board! Enforcement sits exclusively with the Commission, which has broad investigatory powers, and fines are ... well... huge: up to 10% of total turnover in the preceding financial year.
#DMA/open🧵