EU’s EPDB releases statement on privacy implications of mergers, in Google-Fitbit case

Following the eighteenth plenary session of the European Data Protection Board (EPDB), a statement was released on Google’s intention to acquire Fitbit, and highlighted concerns for data protection. The EDPB adopted a statement highlighting that the ‘possible further combination and accumulation of sensitive personal data regarding people in Europe by a major tech company could entail a high level of risk to privacy and data protection. The EDPB reminds the parties to the proposed merger of their obligations under the GDPR and to conduct a full assessment of the data protection requirements and privacy implications of the merger in a transparent way. The Board urges the parties to mitigate possible risks to the rights to privacy and data protection before notifying the merger to the European Commission’.