During its 30th plenary session, the European Data Protection Board (EDPB) adopted a statement on data subject rights in connection to the state of emergency in member states. The board also adopted a letter in response to a letter from Civil Liberties Union for Europe, Access Now, and the Hungarian Civil Liberties Union (HCLU) regarding the Hungarian Government's Decree 179/2020 of 4 May. The EDPB recalls that, the protection of personal data must be upheld in all emergency measures, to respect the overarching values of democracy, rule of law, and fundamental rights on which the EU is founded. Both in the statement and the letter, the EDPB reiterates that the GDPR remains applicable and allows for an efficient response to the pandemic, while still protecting fundamental rights and freedoms. The GDPR already enables data-processing operations necessary to contribute to the fight against the COVID-19 pandemic.