Content type · 804 documents

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filter by Topic Personal Data2636 Controllers1713 Processing1552 Supervision1414 Supervisory Authorities1239 Monitoring1157 Data Controller828 Certification792 Consent732 Processors728 Codes of Conduct571 International Transfer442
501–550 of 804 sort newestoldest
Opinion 14/2023 Vestas Wind Systems Group — controller BCRs Danish SA ·Opinion ·EDPB Social Media International Transfer Controllers Jul 27, 2023
Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 1 Adopted Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 On 10 July 2023, the European… EDPB Privacy Shield International Transfer Processing Agreement Jul 18, 2023
Statement 1/2023 first review of the functioning of the adequacy decision for Japan Statement ·EDPB Privacy Shield International Transfer Right to Object Jul 18, 2023
Opinion 12/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification… competent SA of Cyprus ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 11, 2023
Opinion 13/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 13/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a certification… competent SA of Croatia ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 11, 2023
Opinion 11/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Sweden ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision Jul 11, 2023
Opinion 10/2023 PROSEGUR Group — controller BCRs Spanish SA ·Opinion ·EDPB Codes of Conduct Controllers International Transfer Jun 30, 2023
Recommendations 1/2022 Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations ·EDPB International Transfer Controllers Personal Data Jun 20, 2023
Template Complaint form and Template Acknowledgement of receipt Template Complaint Form Adopted on 20 June 2023 Adopted 2 1. Introduction Before lodging a complaint, please read more about your right to lodge a complaint [ link to page with… EDPB Controllers Supervisory Authorities Personal Data Jun 20, 2023
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities Right to Object May 24, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Inspection Access Rights and Cooperation Obligations Supervision May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
Opinion 9/2023 Vertiv — controller BCRs Italian SA ·Opinion ·EDPB Social Media Controllers International Transfer May 17, 2023
Opinion 7/2023 Autodesk Group — controller BCRs Irish SA ·Opinion ·EDPB Social Media Controllers International Transfer May 5, 2023
Opinion 8/2023 Autodesk Group — processor BCRs Irish SA ·Opinion ·EDPB Social Media Processors International Transfer May 5, 2023
Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… EDPB Social Media Supervision Personal Data Apr 19, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right to Rectification Right of Access Procedures Apr 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Data Breaches Notification Obligation Controllers Apr 4, 2023
Opinion 6/2023 Royal Greenland Group — controller BCRs Danish SA ·Opinion ·EDPB Social Media Controllers International Transfer Mar 23, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers Joint Controllers International Transfer Feb 24, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Human Resources Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Accountability Inspection Access Rights and Cooperation Obligations Feb 24, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Opinion 03/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Romania ·Opinion ·EDPB Supervisory Authorities Monitoring Codes of Conduct Feb 17, 2023
Opinion 02/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR 1 Adopted Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Latvia ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision Feb 17, 2023
Opinion 1/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR competent SA of Croatia ·Opinion ·EDPB Monitoring Supervisory Authorities Supervision Feb 17, 2023
Opinion 4/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 4/2023 on the draft decision of the competent supervisory authority of Malta regarding the approval of the requirements for accreditation of a certification body… competent SA of Malta ·Opinion ·EDPB Certification Supervisory Authorities Supervision Feb 17, 2023
Report of the work undertaken by the Cookie Banner Taskforce EDPB Cookies Telecommunications Direct Marketing Jan 18, 2023
Richtsnoeren 2/2023 Richtsnoeren 2/2023 over het technische topassingsgebied van artikel 5, lid 3, van de eprivacyrichtlijn Richtsnoeren ·EDPB Cookies Telecommunications Direct Marketing NL 2023
Statement on the implications of the CJEU judgment C-817/19 on the use of PNR in Member States 1 Statement 5 / 2022 on the implications of the CJEU judgement C - 817/19 regarding the implementation of the Directive (EU) 2016/681 on the use of PNR in M ember S tates Adopted… EDPB Personal Data Retention Period Storage Limitation Dec 13, 2022
Opinion 32/2022 Ramboll Group — controller BCRs Danish SA ·Opinion ·EDPB Social Media International Transfer Controllers Dec 6, 2022
Opinion 31/2022 Piano Group — processor BCRs Slovak SA ·Opinion ·EDPB Processors Social Media International Transfer Nov 28, 2022
Opinion 30/2022 Piano Group — controller BCRs Slovak SA ·Opinion ·EDPB Social Media International Transfer Controllers Nov 28, 2022
Opinion 29/2022 DSV Group — controller BCRs Danish SA ·Opinion ·EDPB Social Media Controllers International Transfer Nov 18, 2022
Statement 04/2022 design choices for a digital euro from the privacy and data protection perspective 1 Adopted Statement 04/2022 on the design choices for a digital euro from the privacy and data protection perspective Adopted on 10 October 2022 The European Data Protection Board… Statement ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default Oct 10, 2022
Opinion 28/2022 Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Accountability Supervisory Authorities Oct 10, 2022
Opinion 27/2022 LEYTON Group — processor BCRs French SA ·Opinion ·EDPB Social Media Processors Controllers Oct 7, 2022
Opinion 26/2022 Munich Re Reinsurance Group — controller BCRs Data Protection Authority of Bavaria for the Private Sector ·Opinion ·EDPB Social Media International Transfer Controllers Sep 30, 2022
Opinion 25/2022 Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Opinion ·EDPB Certification Accountability Controllers Sep 19, 2022
Statement 03/2022 European Police Cooperation Code Statement ·EDPB Genetic Data Criminal Data Special Categories of Data Sep 12, 2022
Opinion 24/2022 Samres Group — processor BCRs Swedish SA ·Opinion ·EDPB Social Media Processors International Transfer Sep 7, 2022
Opinion 23/2022 Samres Group — controller BCRs Swedish SA ·Opinion ·EDPB Social Media International Transfer Controllers Sep 7, 2022
Opinion 22/2022 Hilti Group — controller BCRs Liechtenstein SA ·Opinion ·EDPB Social Media International Transfer Controllers Sep 7, 2022
Overview on resources made available by Member States to the Data Protection Supervisory Authorities EDPB Supervision Supervisory Authorities Human Resources Sep 5, 2022
Opinion 21/2022 Ellucian Group — processor BCRs Irish SA ·Opinion ·EDPB Social Media Processors Controllers Aug 26, 2022
Opinion 20/2022 Ellucian Group — controller BCRs Irish SA ·Opinion ·EDPB Social Media International Transfer Controllers Aug 26, 2022
Opinion 18/2022 Daimler Truck Group — controller BCRs Baden- Württemberg (Germany) SA ·Opinion ·EDPB Social Media Controllers International Transfer Aug 26, 2022
Opinion 19/2022 Mercedes- Benz Group — controller BCRs Baden- Württemberg (Germany) SA ·Opinion ·EDPB Social Media Controllers International Transfer Aug 26, 2022