Content type · 177 documents
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1523 Controllers1012 Supervision839 Processing833 Monitoring830 Supervisory Authorities725 Certification642 Processors471 Codes of Conduct445 Consent428 Data Controller353 International Transfer319
EDPB Guidelines on processing of personal data through blockchain technologies Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information… Jul 7, 2026
Opinion 15/2026 Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to… Apr 16, 2026
Opinion 14/2026 Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15… Apr 16, 2026
EDPB Report on stakeholder event on processing of personal data to target or deliver political advertisements Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event… Mar 27, 2026
EDPB EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Feb 12, 2026
Opinion 34/2025 Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted Opinion 34/ 2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted 2 | Adopted The… Dec 2, 2025
EDPB Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Oct 13, 2025
Opinion 15/2025 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH Adopted 1 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority ( AT SA) regarding the certificat ion criteria of BDO Consulting GmbH Adopted on 8 July 2025… Jul 14, 2025
EDPB EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Jun 25, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… May 6, 2025
EDPB SPE Programma - AI Privacy Risks & Mitigations Large Language Models (LLMs) (Isabel BARBERÁ) "The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical… Apr 21, 2025
Opinion 3/2025 Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. Apr 14, 2025
Statement 2/2025 Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C-817/19 Adopted 1 Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C - 817/19 Adopted on 13 March 2025 Adopted 2 3 Final remarks… Mar 14, 2025
Recommendations 1/2025 Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code Recommendations 1 /2025 on the 2027 WADA World Anti - Doping Code Adopted on 11 February 2025 Executive Summary By way of letter dated 2nd October 2024 1 , the European Commission… Feb 13, 2025
Statement 1/2025 Statement 1/2025 on Age Assurance 1 Statement 1/2025 on Age Assurance Adopted on 11 February 2025 1 The European Data Protection Board has adopted the following statement: 1. BACKGROUND AND PURPOSE OF THIS… Feb 12, 2025
Opinion 28/2024 Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Adopted 1 Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Adopted on 17 December 2024 Adopted 2 Executive… Dec 18, 2024
Opinion 27/2024 Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Adopted 1 Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)… Dec 2, 2024
Statement 5/2024 Statement 5/2024 on the Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement 5/2024 on the Recommendations of the High - Level Group on Access to Data for Effective Law Enforcement Adopted on 4 November 2024 The European Data Protection Board has… Nov 4, 2024
Guidelines 2/2023 Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines on technical scope of art. 5(3) of ePrivacy Directive Oct 16, 2024
work programme 2024 2025 EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 22/2024 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Oct 9, 2024
Statement 3/2024 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Jul 16, 2024
Guidelines 01/2023 Guidelines 01/2023 on Article 37 Law Enforcement Directive Adopted 1 Guidelines 0 1 / 2023 on Article 37 Law Enforcement Directive V ersion 2 . 1 Adopted on 19 June 2024 Adopted 2 Version history Version 1.0 27 September 2023 Adoption of… Jun 19, 2024
Statement 2/2024 Statement 2/2024 on the financial data access and payments package Adopted 1 Statement 2/2024 on the financial data access and payments package Adopted on 23 May 2024 The European Data Protection Board has adopted the following statement: 1… May 27, 2024
Opinion 11/2024 Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… May 24, 2024
EDPB Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… Apr 24, 2024
annual report 2023 EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 6/2024 Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Adopted 1 Opinion 6/2024 on the draft list of the Latvian SA on pro- cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Adopted on… Apr 18, 2024
Opinion 08/2024 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Apr 17, 2024
Statement 1/2024 Statement 1/2024 on legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse 1 Statement 1/2024 on legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse Adopted on 13 February 2024 The… Feb 14, 2024
Opinion 37/2023 Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… Dec 21, 2023
Opinion 02/2023 EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro Adopted 2 Adopted 3 Executive summary Two years after the launch of the investigation phase on the issuance of a digital euro by the European Central Bank (ECB), the European… Oct 17, 2023
Opinion 11/2023 Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct… Jul 11, 2023
Recommendations 1/2022 Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Adopted 1 Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Adopted on 20… Jun 20, 2023
Guidelines 04/2022 Guidelines 04/2022 on the calculation of administrative fines under the GDPR Guidelines on the calculation of administrative fines under the GDPR May 24, 2023
Guidelines 05/2022 Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidelines on the use of facial recognition technology in the area of law enforcement May 17, 2023
annual report 2022 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Apr 17, 2023
Guidelines 01/2022 Guidelines 01/2022 on data subject rights - Right of access Guidelines on data subject rights - Right of access Apr 17, 2023
Guidelines 9/2022 Guidelines 9/2022 on personal data breach notification under GDPR Guidelines on personal data breach notification under GDPR Apr 4, 2023
Guidelines 07/2022 Guidelines 07/2022 on certification as a tool for transfers Guidelines on certification and identifying certification criteria Feb 24, 2023
Guidelines 03/2022 Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines on deceptive design patterns in social media platform interfaces: how to recognise and avoid them Feb 24, 2023
Guidelines 05/2021 Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Adopted 1 Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Version 2.0 Adopted… Feb 24, 2023
work programme 2023 2024 EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Feb 22, 2023
Opinion 1/2023 Opinion 1/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR Adopted 1 Opinion 1/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a code of conduct… Feb 17, 2023
Opinion 02/2023 Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR 1 Adopted Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct… Feb 17, 2023
Opinion 03/2023 Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct… Feb 17, 2023
EDPB Overview on resources made available by Member States to the Data Protection Supervisory Authorities Overview on resources made available by Member States to the Data Protection Supervisory Authorities 5 September 2022 2 BACKGROUND The European Data Protection Board (EDPB)… Sep 5, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Adopted 2 EDPB-EDPS Joint Opinion 0 4/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual… Jul 28, 2022