Content type · 448 documents
Guidance
Official guidance documents, best practices, and recommendations
Filter by Topic Personal Data1523 Controllers1012 Supervision839 Processing833 Monitoring830 Supervisory Authorities725 Certification642 Processors471 Codes of Conduct445 Consent428 Data Controller353 International Transfer319
Opinion 20/2026 Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group Adopted on 07 July 2026 1 | Adopted 2… Jul 7, 2026
EDPB Template for Cross-Regulatory Cooperation Agreements 1 | Adopted Template for Cross-Regulatory Cooperation Agreements Adopted by the EDPB on July 7 th 2026 2 | Adopted Explanatory note Cross-regulatory cooperation between data… Jul 7, 2026
EDPB Guidelines on processing of personal data through blockchain technologies Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information… Jul 7, 2026
Opinion 21/2026 Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group Adopted on 07 July 2026 1 | Adopted… Jul 7, 2026
Opinion 19/2026 Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group Adopted on 08 June 2026 1 | Adopted 2… Jun 8, 2026
Opinion 18/2026 Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group Adopted on 08 June 2026 1 | Adopted 2… Jun 8, 2026
Opinion 13/2026 Opinion 13/2026 on the draft decision of the Office of the Data Protection Ombudsman (FI SA) regarding the approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR Opinion 13 /2026 on the draft decision of the Office of the Data Protection Ombudsman (FI SA) regarding the approval of the requirement for accreditation of a certification body… May 12, 2026
Opinion 17/2026 Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group Opinion 17 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group Adopted on 11 May 2026 1 | Adopted 2… May 11, 2026
Opinion 16/2026 Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group Opinion 16 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group Adopted on 11 May 2026 1 | Adopted 2… May 11, 2026
Opinion 11/2026 Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group Adopted on 15 April 2026… Apr 27, 2026
Opinion 12/2026 Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group Adopted on 15 April 2026 1 |… Apr 27, 2026
Opinion 10/2026 Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group Adopted on 15 April 2026 1 | Adopted 2 |… Apr 27, 2026
Opinion 9/2026 Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group Adopted on 15 April 2026… Apr 27, 2026
Opinion 14/2026 Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15… Apr 16, 2026
Opinion 15/2026 Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to… Apr 16, 2026
EDPB Report on stakeholder event on processing of personal data to target or deliver political advertisements Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event… Mar 27, 2026
Opinion 4/2026 EDPS Opinion 4/2026 on the Proposal for a Regulation establishing a framework of measures to facilitate the transport of military equipment, goods and personnel across the Union Opinion 4 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABB Group Adopted on 15 January 2026 1 | 2 | The… Mar 19, 2026
EDPB EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes regarding entry conditions to the United States for EEA citizens Rue Wiertz 60, 1047 Brussels | Anu Talus Chair of the European Data Protection Board (EDPB) Commissioner Michael M c G rath Commissioner Magnus B runner Commissioner for… Mar 12, 2026
Opinion 8/2026 Opinion 8/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group Opinion 8 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group Adopted on 10 March 2026 1 | Adopted 2… Mar 10, 2026
Opinion 7/2026 Opinion 7/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group Opinion 7 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group Adopted on 10 March 2026 1 |… Mar 10, 2026
EDPB Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 1. Background The EDPB organise d a remote stakeholder event on 12 December 2025 to collect… Feb 18, 2026
EDPB EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Feb 12, 2026
Opinion 5/2026 Opinion 5/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group Opinion 5 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group Adopted on 10 February 2026 1 |… Feb 10, 2026
Opinion 06/2026 Opinion 06/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group Opinion 06 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group Adopted on 10 February 2026… Feb 10, 2026
Opinion 2/2026 Opinion 2/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the AkzoNobel Group Opinion 2 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the A kzoNobel Group Adopted on 15 January 2026 1 | 2… Feb 5, 2026
Opinion 3/2026 Opinion 3/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group Opinion 3 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group Adopted on 15 January 2026… Feb 5, 2026
Recommendations 2/2025 Recommendations 2/2025 onthe legal basis for requiring the creation of user accounts on e-commerce websites Jan 19, 2026
Opinion 2/2026 Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision Jan 19, 2026
Opinion 30/2025 Opinion 30/2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group Opinion 30 / 2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | 2… Dec 2, 2025
Opinion 29/2025 Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | 2 |… Dec 2, 2025
Opinion 31/2025 Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Opinion 31 / 2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Adopted on 02 December 2025 1 | 2… Dec 2, 2025
Opinion 33/2025 Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | 2 | The… Dec 2, 2025
Opinion 32/2025 Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | 2 | The… Dec 2, 2025
Opinion 34/2025 Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted Opinion 34/ 2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted 2 | Adopted The… Dec 2, 2025
EDPB Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency
EDPB Translations proofread by EDPB Members. This language version has not yet been proofread. van de tekst in de afbeeldingen in de bijlage
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Oct 13, 2025
EDPB Recommendations on calculating the audit cycle in EU Large-Scale IT Systems 1 Recommendations on calculating the audit cycle in EU Large-Scale IT Systems The EU's Large-Scale IT Systems’ regulations establish specific audit cycle requirements for… Oct 13, 2025
Opinion 25/2025 Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | 2 | The… Oct 7, 2025
Opinion 23/2025 Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group Adopted on 07 October 2025 1 | 2 |… Oct 7, 2025
Opinion 24/2025 Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | 2 | The… Oct 7, 2025
EDPS the two Proposals for Council Decisions on the signing and conclusion of the United Nations Convention against Cybercrime Sep 23, 2025
EDPB EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Adopted on 8 July 2025 2 Adopted 1. BACKGROUND 1. On 12 March 2024 , the… Sep 23, 2025
0688 opinion the Recommendation for a Council Decision authorising the opening of negotiations on a framework agreement between EU and USA on the exchange of information for security screenings and identity verifications Sep 23, 2025
EDPB Response to CCIA Europe concerning EDPB guidelines on calculation of fines Anu Talus Chair of the European Data Protection Board Claudia Canelles Quaroni Privacy and Safety Lead, CCIA Europe Computer & Communications Industry Association (CCIA) Brussels,… Sep 23, 2025