Content type · 241 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data2636 Controllers1713 Processing1552 Supervision1414 Supervisory Authorities1239 Monitoring1157 Data Controller828 Certification792 Consent732 Processors728 Codes of Conduct571 International Transfer442
51–100 of 241 sort newestoldest
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Identification Biometric Data May 24, 2024
Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… EDPB Privacy Shield Notified Body Competence Challenges and Dispute Resolution International Transfer Apr 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media Human Resources Apr 23, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB DPIA Privacy Impact Assessment Personal Data Apr 18, 2024
Opinion 08/2024 Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Opinion ·EDPB Consent Legitimate Interest Marketing Apr 17, 2024
Statement 1/2024 legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse Statement ·EDPB Monitoring Minors Telecommunications Feb 14, 2024
Opinion 37/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… competent SA of Luxemburg ·Opinion ·EDPB Certification Supervisory Authorities Supervision Dec 21, 2023
EDPB Article 97 GDPR application report: GDPR successful but improvements needed 1 Adop ted Contribution of the EDPB to the report on the application of the GDPR under Article 97 Adopted on 12 December 2023 2 Adop ted 3 Adop ted Ge neral EDPB policy messages 1… Certification Human Resources Social Media Dec 15, 2023
Opinion 02/2023 EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro Adopted 2 Adopted 3 Executive summary Two years after the launch of the investigation phase on the issuance of a digital euro by the European Central Bank (ECB), the European… Opinion Privacy by Design Privacy by Default Privacy by Design & Default Oct 17, 2023
Opinion 11/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Sweden ·Opinion ·EDPB Monitoring Supervisory Authorities Supervision Jul 11, 2023
Recommendations 1/2022 Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations ·EDPB International Transfer Controllers Personal Data Jun 20, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines GDPR Article 5 Principles of Processing Employees May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Controllers Apr 4, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Data Portability Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Lawful Basis Privacy by Design & Default Feb 24, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers Processors Joint Controllers Feb 24, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Opinion 1/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR competent SA of Croatia ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision Feb 17, 2023
Opinion 02/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR 1 Adopted Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Latvia ·Opinion ·EDPB Monitoring Supervisory Authorities Supervision Feb 17, 2023
Opinion 03/2023 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct… competent SA of Romania ·Opinion ·EDPB Supervisory Authorities Monitoring Codes of Conduct Feb 17, 2023
Richtsnoeren 2/2023 Richtsnoeren 2/2023 over het technische topassingsgebied van artikel 5, lid 3, van de eprivacyrichtlijn Richtsnoeren ·EDPB Cookies Direct Marketing Telecommunications NL 2023
Overview on resources made available by Member States to the Data Protection Supervisory Authorities EDPB Supervision Human Resources Supervisory Authorities Sep 5, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Opinion Minors Child Consent Telecommunications Jul 28, 2022
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Opinion Health Data Healthcare Personal Data Jul 12, 2022
Opinion 12/2022 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 12 /202 2 on the draft decision of the competent supervisory authority of France regarding the approval of the requirements for accreditation of a certification… competent SA of France ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 4, 2022
Opinion 14/2022 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 14 / 20 22 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a code of… competent SA of Bulgaria ·Opinion ·EDPB Monitoring Supervisory Authorities Codes of Conduct Jul 4, 2022
Opinion 15/2022 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR competent SA of Luxembourg ·Opinion ·EDPB Monitoring Supervisory Authorities Supervision Jul 4, 2022
Opinion 13/2022 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent SA of Bulgaria ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 4, 2022
Opinion 16/2022 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 16 / 20 22 on the draft decision of the competent supervisory authority of Slovenia regarding the approval of the requirements for accreditation of a code of… competent SA of Slovenia ·Opinion ·EDPB Monitoring Supervisory Authorities Supervision Jul 4, 2022
Opinion 10/2022 Fresenius Group — controller BCRs Hesse SA (Germany) ·Opinion ·EDPB International Transfer Personal Data Controllers Jun 16, 2022
Response of the EDPB to the European Commission's targeted consultation on a digital euro Privacy by Design & Default Privacy by Design Privacy by Default Jun 14, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Opinion 08/2022 Bioclinica Group — controller BCRs Danish SA ·Opinion ·EDPB International Transfer Controllers Social Media May 4, 2022
Opinion 2/2022 EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) 1 Adopted EDPB - EDP S Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) Adopted… Opinion Personal Data Healthcare Privacy by Design & Default May 4, 2022
Opinion 09/2022 Bioclinica Group — processor BCRs Danish SA ·Opinion ·EDPB Processors International Transfer Personal Data May 4, 2022
Opinion 06/2022 Groupon International Limited — controller BCRs Irish SA ·Opinion ·EDPB International Transfer Controllers Codes of Conduct Apr 19, 2022
Opinion 05/2022 Lundbeck Group — controller BCRs Danish SA ·Opinion ·EDPB International Transfer Personal Data Social Media Apr 19, 2022
Opinion 07/2022 MOL Group — controller BCRs Hungarian SA ·Opinion ·EDPB International Transfer Controllers Personal Data Apr 19, 2022
Opinion 04/2022 Norican Group — controller BCRs Danish SA ·Opinion ·EDPB International Transfer Controllers Personal Data Mar 18, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Genetic Data Mar 14, 2022
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Supervision Controllers Supervisory Authorities Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Controllers Supervisory Authorities Feb 8, 2022
Opinion 02/2022 WEBHELP Group — controller BCRs French SA ·Opinion ·EDPB International Transfer Controllers Codes of Conduct Feb 7, 2022
Opinion 03/2022 WEBHELP Group — processor BCRs French SA ·Opinion ·EDPB Processors International Transfer Controllers Feb 7, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches Access Controls Jan 3, 2022
Richtsnoeren 8/2022 Richtsnoeren 8/2022 voor het bepalen van de leidende toezichthoudende autoriteit van de verwerkingsverantwoordelijke of de verwerker Richtsnoeren ·EDPB Controllers Supervisory Authorities Processing NL 2022