Content type · 170 documents
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1523 Controllers1012 Supervision839 Processing833 Monitoring830 Supervisory Authorities725 Certification642 Processors471 Codes of Conduct445 Consent428 Data Controller353 International Transfer319
EDPB Guidelines on processing of personal data through blockchain technologies Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information… Jul 7, 2026
EDPB Template for Cross-Regulatory Cooperation Agreements 1 | Adopted Template for Cross-Regulatory Cooperation Agreements Adopted by the EDPB on July 7 th 2026 2 | Adopted Explanatory note Cross-regulatory cooperation between data… Jul 7, 2026
Opinion 15/2026 Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to… Apr 16, 2026
Opinion 14/2026 Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15… Apr 16, 2026
EDPB Report on stakeholder event on processing of personal data to target or deliver political advertisements Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event… Mar 27, 2026
Opinion 34/2025 Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted Opinion 34/ 2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted 2 | Adopted The… Dec 2, 2025
Opinion 32/2025 Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | 2 | The… Dec 2, 2025
Opinion 31/2025 Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Opinion 31 / 2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Adopted on 02 December 2025 1 | 2… Dec 2, 2025
Opinion 29/2025 Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | 2 |… Dec 2, 2025
EDPB Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency
EDPB Translations proofread by EDPB Members. This language version has not yet been proofread. van de tekst in de afbeeldingen in de bijlage
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Oct 13, 2025
Opinion 19/2025 Opinion 19/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group Adopted Opinion 19 /2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group Adopted on 11… Sep 11, 2025
Opinion 22/2025 Opinion 22/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group Adopted Opinion 22 / 2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group Adopted on 11… Sep 11, 2025
Opinion 21/2025 Opinion 21/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group Adopted Opinion 21 / 2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group Adopted on 11 September… Sep 11, 2025
Opinion 17/2025 Opinion 17/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group Adopted Opinion 1 7 /2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group Adopted on 11 September… Sep 11, 2025
Opinion 15/2025 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH Adopted 1 Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority ( AT SA) regarding the certificat ion criteria of BDO Consulting GmbH Adopted on 8 July 2025… Jul 14, 2025
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Adopted 1 Opinion 16 /2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification… Jul 14, 2025
Opinion 14/2025 Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Wilhelmsen Group EDPB, Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Jul 10, 2025
Opinion 11/2025 Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group EDPB, Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group, 2025. Jun 6, 2025
Opinion 12/2025 Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Jun 6, 2025
Guidelines 02/2024 Guidelines 02/2024 on Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Jun 5, 2025
Opinion 8/2025 Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. May 21, 2025
Opinion 10/2025 Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. May 21, 2025
EDPB EDPB-EDPS Letter on European Commission draft proposal on simplification of record-keeping under the GDPR "Based on the information available, and subject to a full analysis of the specific proposal, the EDPB and EDPS can express preliminary support to this targeted simplification… May 19, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… May 6, 2025
Opinion 4/2025 Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. Apr 9, 2025
EDPB EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Opinion 2/2025 Opinion 2/2025 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Alfa Laval Group Adopted Opinion 2/2025 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Alfa Laval Group Adopted on 13 March 2025… Mar 14, 2025
Recommendations 1/2025 Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code Recommendations 1 /2025 on the 2027 WADA World Anti - Doping Code Adopted on 11 February 2025 Executive Summary By way of letter dated 2nd October 2024 1 , the European Commission… Feb 13, 2025
EDPB Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… Feb 12, 2025
Opinion 01/2025 Opinion 01/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… Jan 21, 2025
EDPB Coordinated Enforcement Action, implementation of the right of access by controllers EDPB 20 jan 2025, Coordinated Enforcement Action, implementation of the right of access by controllers. Jan 20, 2025
EDPB Position paper on Interplay between data protection and competition law 1 Position paper on Interplay between data protection and competition law Adopted on 16 January 2025 2 Executive summary Promoting cooperation between personal data protection and… Jan 17, 2025
Opinion 28/2024 Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Adopted 1 Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Adopted on 17 December 2024 Adopted 2 Executive… Dec 18, 2024
Opinion 27/2024 Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Adopted 1 Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)… Dec 2, 2024
Guidelines 2/2023 Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines on technical scope of art. 5(3) of ePrivacy Directive Oct 16, 2024
Opinion 22/2024 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Oct 9, 2024
Opinion 19/2024 Opinion 19/2024 on the EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Adopted 1 Opinion 19/2024 on the EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Adopted… Jul 18, 2024
Guidelines 01/2023 Guidelines 01/2023 on Article 37 Law Enforcement Directive Adopted 1 Guidelines 0 1 / 2023 on Article 37 Law Enforcement Directive V ersion 2 . 1 Adopted on 19 June 2024 Adopted 2 Version history Version 1.0 27 September 2023 Adoption of… Jun 19, 2024
EDPB Report of the work undertaken by the ChatGPT Taskforce Report of the work undertaken by the ChatGPT Taskforce 23 May 2024 Final 2 Final 3 D ISCLAIMER The positions presented in this document result from the coordination of the members… May 24, 2024
Opinion 11/2024 Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… May 24, 2024
annual report 2023 EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 7/2024 Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria Adopted 1 Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification… Apr 19, 2024
Opinion 08/2024 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Apr 17, 2024
Opinion 04/2024 Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Opinion 04/2024 on the notion of main establishment of a controller in the Union under Article 4(16)(a) GDPR Adopted on 13 February 2024 Executive summary The French Supervisory… Feb 13, 2024
Opinion 2/2024 Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group Adopted Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group Adopted on 13 February… Feb 13, 2024
Opinion 37/2023 Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… Dec 21, 2023