During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO). If the decision is adopted, it will be the first one that covers an international organisation, not a state or region.