Content type · 452 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data2636 Controllers1713 Processing1552 Supervision1414 Supervisory Authorities1239 Monitoring1157 Data Controller828 Certification792 Consent732 Processors728 Codes of Conduct571 International Transfer442
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Study on the secondary use of personal data in the context of scientific research 2 This study has been prepared by Milieu under Contract No EDPS/2019/02 - 04 for the benefit of the EDPB. The study has been carried out by researchers from KU Leuven (CiTiP) and… EDPB Apr 3, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Mar 14, 2025
wetsvoorstel Verzamelwet gegevensverwerking VWS II.a AP Autoriteit Persoonsgegevens Mar 10, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… ·Opinion ·EDPB Jan 21, 2025
hier EDPB 17 jan 2025, Guidelines 01/2025 on Pseudonymisation ➡️ Geef uw mening over deze concept richtsnoeren hier. Deadline : 28 februari 2025. De EDPB werkt ook nog aan Richtsnoeren… EDPB Jan 21, 2025
Coordinated Enforcement Action, implementation of the right of access by controllers EDPB 20 jan 2025, Coordinated Enforcement Action, implementation of the right of access by controllers. EDPB Jan 20, 2025
Position paper on Interplay between data protection and competition law EDPB Jan 17, 2025
One-Stop-Shop case digest on right of access EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het… EDPB Jan 16, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Dec 18, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Dec 2, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Oct 9, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Jul 18, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Jul 16, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… ·Opinion ·EDPB Jul 16, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… ·Opinion ·EDPB Jul 16, 2024
EU-US Data Privacy Framework FAQ for European individuals EDPB Jul 16, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Jun 3, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB May 24, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024
Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… EDPB Apr 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria ·Opinion ·EDPB Apr 19, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB Apr 18, 2024
Opinion 08/2024 Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Opinion ·EDPB Apr 17, 2024
Opinion 04/2024 notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Opinion ·EDPB Feb 13, 2024