Between November 12 and 13, European data protection authorities met for the fifteenth plenary session of European Data Protection Board (EDPB). During the plenary, the EDPB adopted its report on the third Annual Joint Review of the EU-US Privacy Shield. In the report, the EDPB welcomes the efforts made by the U.S. authorities to implement the Privacy Shield, while signaling a number of concerns still need to be addressed (compliance check, recertification process). The EPDB also adopted a final version of the Guidelines on Territorial Scope following public consultation.  The Guidelines provide further clarification on the application of the GDPR in various situations, for example, where the data controller or processor is established outside the EEA, including on the designation and role of a representative under Art. 27 GDPR.