Skip to content
Content type · 346 documents

Guidance

Official guidance documents, best practices, and recommendations

Opinion 20/2026 Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group Adopted on 07 July 2026 1 | Adopted 2… Social Media Controllers International Transfer Jul 7, 2026
Opinion 21/2026 Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group Adopted on 07 July 2026 1 | Adopted… Social Media International Transfer Controllers Jul 7, 2026
EDPB Guidelines on processing of personal data through blockchain technologies Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information… Cloud Computing Personal Data Privacy by Design & Default Jul 7, 2026
Opinion 18/2026 Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group Adopted on 08 June 2026 1 | Adopted 2… Social Media International Transfer Codes of Conduct Jun 8, 2026
Opinion 19/2026 Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group Adopted on 08 June 2026 1 | Adopted 2… Processors Social Media Personal Data Jun 8, 2026
Opinion 16/2026 Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group Opinion 16 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group Adopted on 11 May 2026 1 | Adopted 2… Social Media International Transfer Controllers May 11, 2026
Opinion 17/2026 Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group Opinion 17 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group Adopted on 11 May 2026 1 | Adopted 2… Processors Social Media Codes of Conduct May 11, 2026
Opinion 10/2026 Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group Adopted on 15 April 2026 1 | Adopted 2 |… Social Media International Transfer Controllers Apr 27, 2026
Opinion 12/2026 Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group Adopted on 15 April 2026 1 |… Social Media International Transfer Controllers Apr 27, 2026
Opinion 11/2026 Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group Adopted on 15 April 2026… Social Media Controllers International Transfer Apr 27, 2026
Opinion 9/2026 Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group Adopted on 15 April 2026… Social Media International Transfer Controllers Apr 27, 2026
Opinion 14/2026 Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15… Certification Accountability European Cybersecurity Certification Schemes Apr 16, 2026
Opinion 15/2026 Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to… Certification European Cybersecurity Certification Schemes Accountability Apr 16, 2026
EDPB Report on stakeholder event on processing of personal data to target or deliver political advertisements Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event… Marketing Personal Data Joint Controllers Mar 27, 2026
Opinion 4/2026 EDPS Opinion 4/2026 on the Proposal for a Regulation establishing a framework of measures to facilitate the transport of military equipment, goods and personnel across the Union Opinion 4 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABB Group Adopted on 15 January 2026 1 | 2 | The… Social Media International Transfer Controllers Mar 19, 2026
Opinion 8/2026 Opinion 8/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group Opinion 8 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group Adopted on 10 March 2026 1 | Adopted 2… Social Media Controllers International Transfer Mar 10, 2026
Opinion 7/2026 Opinion 7/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group Opinion 7 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group Adopted on 10 March 2026 1 |… Social Media Controllers International Transfer Mar 10, 2026
EDPB Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 1. Background The EDPB organise d a remote stakeholder event on 12 December 2025 to collect… Recipient Anonymization Pseudonymization Feb 18, 2026
EDPB EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Fines Supervision Mutual Assistance Between Member States for AI Oversight Feb 12, 2026
Opinion 06/2026 Opinion 06/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group Opinion 06 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group Adopted on 10 February 2026… Social Media Controllers International Transfer Feb 10, 2026
Opinion 5/2026 Opinion 5/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group Opinion 5 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group Adopted on 10 February 2026 1 |… Processors Social Media Processing Feb 10, 2026
Opinion 3/2026 Opinion 3/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group Opinion 3 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group Adopted on 15 January 2026… Social Media International Transfer Controllers Feb 5, 2026
Opinion 2/2026 Opinion 2/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the AkzoNobel Group Opinion 2 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the A kzoNobel Group Adopted on 15 January 2026 1 | 2… Social Media International Transfer Controllers Feb 5, 2026
Opinion 32/2025 Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | 2 | The… Social Media Controllers International Transfer Dec 2, 2025
Opinion 33/2025 Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | 2 | The… Processors Social Media International Transfer Dec 2, 2025
Opinion 30/2025 Opinion 30/2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group Opinion 30 / 2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | 2… Processors Social Media Controllers Dec 2, 2025
Opinion 31/2025 Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Opinion 31 / 2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Adopted on 02 December 2025 1 | 2… Social Media Controllers International Transfer Dec 2, 2025
Opinion 34/2025 Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted Opinion 34/ 2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted 2 | Adopted The… Certification Accountability Controllers Dec 2, 2025
Opinion 29/2025 Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | 2 |… Social Media Controllers International Transfer Dec 2, 2025
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Monitoring International Transfer Privacy Shield Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Application Scope: Temporal and Territorial Dimensions Data Governance for AI Direct Marketing Oct 13, 2025
Opinion 25/2025 Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | 2 | The… Processors Social Media Controllers Oct 7, 2025
Opinion 24/2025 Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | 2 | The… Social Media International Transfer Personal Data Oct 7, 2025
Opinion 23/2025 Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group Adopted on 07 October 2025 1 | 2 |… Social Media Controllers International Transfer Oct 7, 2025
Opinion 19/2025 Opinion 19/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group Adopted Opinion 19 /2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group Adopted on 11… Social Media Controllers International Transfer Sep 11, 2025
Opinion 18/2025 Opinion 18/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Shopify Group Adopted Opinion 18 /2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Shopify Group Adopted on 11 September 2025… Processors Social Media Controllers Sep 11, 2025
Opinion 17/2025 Opinion 17/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group Adopted Opinion 1 7 /2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group Adopted on 11 September… Social Media Controllers International Transfer Sep 11, 2025
Opinion 20/2025 Opinion 20/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Processor Binding Corporate Rules of the Northern Trust Group Adopted Opinion 20 / 2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Processor Binding Corporate Rules of the Northern Trust Group Adopted on 11… Social Media Processors International Transfer Sep 11, 2025
Opinion 22/2025 Opinion 22/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group Adopted Opinion 22 / 2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group Adopted on 11… Social Media International Transfer Controllers Sep 11, 2025
Opinion 21/2025 Opinion 21/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group Adopted Opinion 21 / 2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group Adopted on 11 September… Social Media Controllers International Transfer Sep 11, 2025
Opinion 13/2025 Opinion 13/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Aramex Group Adopted Opinion 13/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Aramex Group Adopted on 8 July 2025 2… Social Media Controllers International Transfer Jul 14, 2025
Opinion 15/2025 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH Adopted 1 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority ( AT SA) regarding the certificat ion criteria of BDO Consulting GmbH Adopted on 8 July 2025… Certification Codes of Conduct Controllers Jul 14, 2025
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Adopted 1 Opinion 16 /2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification… Certification European Cybersecurity Certification Schemes Accountability Jul 14, 2025
Opinion 14/2025 Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Wilhelmsen Group EDPB, Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Social Media Controllers International Transfer Jul 10, 2025
EDPB EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Minors Privacy by Default Privacy by Design Jun 25, 2025
Opinion 12/2025 Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Social Media Controllers International Transfer Jun 6, 2025