Replying to @alextcone and @catsoo, @EU_EDPB
Oh, I didn’t mean on specifics. I don’t disagree there are better, more fundamental reasons to invalidate it, but I was more thinking of DPAs generally looking at more concrete & broad issues, rather than, say, “data protection in civic tech”.