Skip to content
Content type · 159 documents in this view · 809 in total

Guidance

Official guidance documents, best practices, and recommendations

1–50 of 159 sort newestoldest
2026 Coordinated Enforcement Action, EDPB, Coordinated Enforcement Action, implementation of the right to erasure by controllers EDPB Supervision Right to be Forgotten Right of Access Mar 2, 2026
2026 Reply to the civil society open letter in response on recent spyware abuse cases in the EU EDPB, Reply to the civil society open letter in response on recent spyware abuse cases in the EU EDPB Monitoring Supervision Controllers Feb 16, 2026
2026 EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Supervision Privacy Shield Monitoring Feb 12, 2026
Opinion 2/2026 Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision EDPB - EDPS JOINT OPINION 2 /2026 On the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus) Adopted on 1 0 February… Opinion ·EDPS Notified Body Reporting and Notification Obligations Direct Marketing Data Breaches Feb 11, 2026
Opinion 2/2026 EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework ( EDPB, EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus) Opinion Notified Body Reporting and Notification Obligations Notification Obligation Data Breaches Feb 11, 2026
Opinion 1/2026 EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence EDPB, EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital… Opinion Artificial Intelligence Mutual Assistance Between Member States for AI Oversight Entry Into Force Jan 21, 2026
2025 Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB IP Address Data Portability Direct Marketing Oct 13, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. French SA (FR SA) ·Opinion ·EDPB Certification Supervision Supervisory Authorities Apr 14, 2025
2025 Study on the secondary use of personal data in the context of scientific research 2 This study has been prepared by Milieu under Contract No EDPS/2019/02 - 04 for the benefit of the EDPB. The study has been carried out by researchers from KU Leuven (CiTiP) and… EDPB Personal Data Statistics Scientific Research Apr 3, 2025
2025 EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. International Transfer Codes of Conduct Controllers Mar 19, 2025
2025 Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB Supervision Territorial scope (GDPR) Personal Data Mar 18, 2025
2025 AI: complex algorithms and effective data protection supervision EDPB/SPE 23 jan 2025 AI: complex algorithms and effective data protection supervision. Een rapport opgesteld door Kris Shrishak (ICCL/Enforce) waarin met name bias assessment en… EDPB Training Data Requirements Data Governance for AI Human Oversight Jan 23, 2025
2025 One-Stop-Shop case digest on right of access EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het… EDPB Right of Access Personal Data Legitimate Interest Jan 16, 2025
Opinion 18/2024 DSGVO-zt GmbH certification criteria check currency ·Austrian SA ·Opinion Certification Supervision Supervisory Authorities Jul 18, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… check currency ·French SA ·Opinion Codes of Conduct Supervision Supervisory Authorities Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… check currency ·competent SA of Sweden ·Opinion Certification Supervision Supervisory Authorities Jun 3, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria check currency ·German North Rhine Westphalia SA ·Opinion Certification Supervision Supervisory Authorities Apr 19, 2024
Opinion 38/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification… check currency ·competent SA of Slovenian ·Opinion Certification Supervision Supervisory Authorities Dec 21, 2023
Opinion 12/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification… check currency ·competent SA of Cyprus ·Opinion Certification Supervision Supervisory Authorities Jul 11, 2023
Opinion 13/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 13/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a certification… check currency ·competent SA of Croatia ·Opinion Certification Supervision Supervisory Authorities Jul 11, 2023
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR check currency ·Guidelines ·EDPB Supervision Supervisory Authorities Privacy Shield May 24, 2023
2023 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… check currency Supervision Privacy Shield Supervisory Authorities Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access check currency ·Guidelines ·EDPB Right of Access Personal Data Right to Rectification Apr 17, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria check currency ·Guidelines ·EDPB Certification International Transfer Processing Agreement Feb 24, 2023
Opinion 4/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 4/2023 on the draft decision of the competent supervisory authority of Malta regarding the approval of the requirements for accreditation of a certification body… check currency ·competent SA of Malta ·Opinion Certification Supervision Supervisory Authorities Feb 17, 2023
Opinion 03/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct… check currency ·competent SA of Romania ·Opinion Codes of Conduct Supervision Supervisory Authorities Feb 17, 2023
Statement 04/2022 design choices for a digital euro from the privacy and data protection perspective 1 Adopted Statement 04/2022 on the design choices for a digital euro from the privacy and data protection perspective Adopted on 10 October 2022 The European Data Protection Board… Statement ·EDPB Privacy by Design & Default Privacy by Default Privacy by Design Oct 10, 2022