Content type · 105 documents
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1523 Controllers1012 Supervision839 Processing833 Monitoring830 Supervisory Authorities725 Certification642 Processors471 Codes of Conduct445 Consent428 Data Controller353 International Transfer319
EDPB Guidelines on processing of personal data through blockchain technologies Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information… Jul 7, 2026
Opinion 15/2026 Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to… Apr 16, 2026
Opinion 14/2026 Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15… Apr 16, 2026
EDPB Report on stakeholder event on processing of personal data to target or deliver political advertisements Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event… Mar 27, 2026
EDPB EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Feb 12, 2026
Opinion 34/2025 Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted Opinion 34/ 2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted 2 | Adopted The… Dec 2, 2025
EDPB Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Oct 13, 2025
EDPB EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Adopted on 8 July 2025 2 Adopted 1. BACKGROUND 1. On 12 March 2024 , the… Sep 23, 2025
EDPB EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Adopted on 8 July 2025 2 Adopted 1. BACKGROUND 1. On 12 March 2024 , the… Jul 22, 2025
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Adopted 1 Opinion 16 /2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification… Jul 14, 2025
Statement 4/2025 Statement 4/2025 on the European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Jul 14, 2025
Opinion 15/2025 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH Adopted 1 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority ( AT SA) regarding the certificat ion criteria of BDO Consulting GmbH Adopted on 8 July 2025… Jul 14, 2025
EDPB EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Jun 25, 2025
Guidelines 02/2024 Guidelines 02/2024 on Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Jun 5, 2025
Opinion 3/2025 Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. Apr 14, 2025
EDPB EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Recommendations 1/2025 Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code Recommendations 1 /2025 on the 2027 WADA World Anti - Doping Code Adopted on 11 February 2025 Executive Summary By way of letter dated 2nd October 2024 1 , the European Commission… Feb 13, 2025
Statement 1/2025 Statement 1/2025 on Age Assurance 1 Statement 1/2025 on Age Assurance Adopted on 11 February 2025 1 The European Data Protection Board has adopted the following statement: 1. BACKGROUND AND PURPOSE OF THIS… Feb 12, 2025
EDPB Position paper on Interplay between data protection and competition law 1 Position paper on Interplay between data protection and competition law Adopted on 16 January 2025 2 Executive summary Promoting cooperation between personal data protection and… Jan 17, 2025
Opinion 26/2024 Opinion 26/2024 on the draft decision of the DE Bremen Supervisory Authority regarding the “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented Adopted 1 Opinion 26 / 2024 on the draft decision of the DE Bremen Supervisory Authority regarding the “Catalogue of Criteria for the Certification of IT - supported processing of… Dec 2, 2024
Guidelines 2/2023 Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines on technical scope of art. 5(3) of ePrivacy Directive Oct 16, 2024
work programme 2024 2025 EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 18/2024 Opinion 18/2024 on the draft decision of the Austrian Supervisory Authority regarding DSGVO-zt GmbH certification criteria Adopted 1 Opinion 18/2024 on the draft decision of the Austrian Supervisory Authority regarding DSGV O - zt GmbH certification criteria Adopted on 16 July 2024 Adopted 2 Adopted 3… Jul 18, 2024
Statement 2/2024 Statement 2/2024 on the financial data access and payments package Adopted 1 Statement 2/2024 on the financial data access and payments package Adopted on 23 May 2024 The European Data Protection Board has adopted the following statement: 1… May 27, 2024
EDPB Report of the work undertaken by the ChatGPT Taskforce Report of the work undertaken by the ChatGPT Taskforce 23 May 2024 Final 2 Final 3 D ISCLAIMER The positions presented in this document result from the coordination of the members… May 24, 2024
Opinion 11/2024 Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… May 24, 2024
annual report 2023 EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 08/2024 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Apr 17, 2024
Opinion 02/2023 EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro Adopted 2 Adopted 3 Executive summary Two years after the launch of the investigation phase on the issuance of a digital euro by the European Central Bank (ECB), the European… Oct 17, 2023
Opinion 15/2023 Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria Adopted 1 Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria Adopted on 19 09 2023 Adopted 2 Adopted 3… Sep 19, 2023
Statement 1/2023 Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan 1 Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan Adopted on 18 July 2023 The European Data Protection Board has adopted the following… Jul 18, 2023
Guidelines 04/2022 Guidelines 04/2022 on the calculation of administrative fines under the GDPR Guidelines on the calculation of administrative fines under the GDPR May 24, 2023
Guidelines 03/2021 Guidelines 03/2021 on the application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR May 24, 2023
Guidelines 05/2022 Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidelines on the use of facial recognition technology in the area of law enforcement May 17, 2023
Guidelines 01/2022 Guidelines 01/2022 on data subject rights - Right of access Guidelines on data subject rights - Right of access Apr 17, 2023
annual report 2022 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Apr 17, 2023
Guidelines 8/2022 Guidelines 8/2022 on identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Apr 17, 2023
Guidelines 9/2022 Guidelines 9/2022 on personal data breach notification under GDPR Guidelines on personal data breach notification under GDPR Apr 4, 2023
Guidelines 03/2022 Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines on deceptive design patterns in social media platform interfaces: how to recognise and avoid them Feb 24, 2023
Guidelines 07/2022 Guidelines 07/2022 on certification as a tool for transfers Guidelines on certification and identifying certification criteria Feb 24, 2023
EDPB Report of the work undertaken by the Cookie Banner Taskforce Adopted 1 Report of the work undertaken by the Cookie Banner Taskforce Adopted on 17 January 2023 Adopted 2 Adopted 3 DISCLAIMER The positions presented in this document result… Jan 18, 2023
Opinion 25/2022 Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Adopted 1 Opinion 25 /2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Adopted on 13… Sep 19, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Adopted 2 EDPB-EDPS Joint Opinion 0 4/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual… Jul 28, 2022
Statement 02/2022 Statement 02/2022 on personal data transfers to the Russian Federation 1 Adopted Statement 02/202 2 on personal data transfers to the Russian Federation Adopted on 12 July 2022 The European Data Protection Board has adopted the following statement:… Jul 12, 2022
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Adopted 1 EDPB - EDPS Joint Opinion 03 /2022 on the Proposal for a Regulation on the European Health Data Space Adopted on 12 July 2022 Adopted 2 Adopted 3 Executive Summary With… Jul 12, 2022
EDPB Response of the EDPB to the European Commission's targeted consultation on a digital euro Response of the EDPB to the European Commission's targeted consultation on a digital euro Adopted on 14 June 2022 adopted 2 EUROPEAN COMMISSION DIRECTORATE - GENERAL FOR ECONOMIC… Jun 14, 2022
Guidelines 06/2022 Guidelines 06/2022 on the practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects May 12, 2022
annual report 2021 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… May 12, 2022