Content type · 108 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
51–100 of 108 sort newestoldest
EDPB contribution to the 6th round of consultations on the draft Second Additional Protocol to the Council of Europe Budapest Convention on Cybercrime International Transfer Social Media Telecommunications May 4, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
Opinion 04/2021 EDPB-EDPS Joint Opinion 04/2021 on the Proposal for a Regulation of the European Parliament and of the Council on a framework for the issuance, verification and acceptance of interoperable certificates on vaccination, testing and recovery Opinion Personal Data Healthcare Privacy by Design & Default Mar 31, 2021
Opinion 03/2021 EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act) 1 Adopted EDPB - EDPS Joint Opinion 03 /2021 on the Proposal for a regulation of the European Parliament and of the Coun cil on European data governance (Data Governance Act)… Opinion Personal Data Data Governance for AI Privacy by Design Mar 11, 2021
Guidelines 01/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines ·EDPB Personal Data Social Media Right to Explanation Mar 9, 2021
Statement 03/2021 ePrivacy Regulation Statement ·EDPB Telecommunications Cookies Direct Marketing Mar 9, 2021
EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research Scientific Research Personal Data Healthcare Feb 2, 2021
Opinion 05/2021 draft Administrative Arrangement for the transfer of personal data between the Haut Conseil du Commissariat aux Comptes (H3C) and the Public Company Accounting Oversight Board (PCAOB) Opinion ·EDPB Personal Data Processors Controllers Feb 2, 2021
Guidelines 2/2020 articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies Guidelines ·EDPB Personal Data International Transfer Public Sector Dec 15, 2020
Guidelines 06/2020 interplay of the Second Payment Services Directive and the GDPR Guidelines on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB GDPR Subject-Matter and Objectives Personal Data Consent Dec 15, 2020
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Privacy by Default Privacy by Design GDPR Subject-Matter and Objectives Oct 20, 2020
Guidelines 5/2019 criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) Guidelines ·EDPB Right to be Forgotten Personal Data Right to Erasure Jul 7, 2020
Statement on the processing of personal data in the context of reopening of borders following the COVID-19 outbreak EDPB Personal Data Prior Consultation Health Data Jun 16, 2020
Statement on the data protection impact of the interoperability of contact tracing apps EDPB Healthcare Data Subject Rights Exercise Modalities and Procedures Accuracy Jun 16, 2020
EDPB Annual Report 2019 EDPB Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR STRONGER RIGHTS An Executive Summary of this report,… Privacy by Default Supervision Telecommunications May 18, 2020
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data GDPR Subject-Matter and Objectives May 4, 2020
Guidelines 04/2020 use of location data and contact tracing tools in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Direct Marketing Healthcare Apr 21, 2020
Guidelines 03/2020 processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Healthcare Health Data Apr 21, 2020
Statement on the processing of personal data in the context of the COVID-19 outbreak EDPB Controllers Personal Data Processing Mar 19, 2020
Statement on privacy implications of mergers EDPB Personal Data Accountability Special Categories of Data Feb 19, 2020
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Video Surveillance Legitimate Interest Monitoring Jan 30, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Privacy by Default Privacy by Design Retention Period 2020
Opinion 1/2019 EDPB-EDPS Joint Opinion 1/2019 on the processing of patients’ data and the role of the European Commission within the eHealth Digital Service Infrastructure (eHDSI) Opinion Personal Data Health Data Healthcare Jul 12, 2019
Opinion 10/2019 draft list of the competent supervisory authority of Cyprus regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35(4) GDPR) A dopted 1 Opinion 10/2019 on the draft list of the competent supervisory authorit y of Cyprus regarding the processing operation s subject to the requirement of a data protection… Opinion ·EDPB DPIA Supervisory Authorities Privacy Impact Assessment Jul 12, 2019
Recommendation 01/2019 draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) Recommendation ·EDPB DPIA Personal Data Processing Jul 12, 2019
Guidelines 1/2018 certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation Guidelines ·EDPB Certification GDPR Subject-Matter and Objectives Accountability Jun 4, 2019
Statement 2/2019 use of personal data in the course of political campaigns Statement ·EDPB Personal Data Political Opinions Marketing Mar 13, 2019
Opinion 6/2019 draft list of the competent supervisory authority of Spain regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 6 /201 9 on the draft list of the competent supervisory authority of Spain regarding the processing… Opinion ·EDPB DPIA Supervisory Authorities Personal Data Mar 12, 2019
Opinion 3/2019 Opinion 3/2019 concerning the Questions and Answers on the interplay between the Clinical Trials Regulation (CTR) and the General Data Protection regulation (GDPR) Opinion ·EDPB Personal Data Consent Controllers Jan 23, 2019
Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Monitoring DPIA Supervisory Authorities Jan 23, 2019
Opinion 04/2019 Draft administrative arrangement following EDPB opinion 04/2019 for the transfer of personal data between each of the European Economic Area (“EEA”) Authorities set out in Appendix A and each of the non-EEA Authorities set out in Appendix B Draft January 7 , 201 9 Draft administrative a rrangement for the transfer of personal data between Each of t he European Economic Area (“ E EA ”) Authorities set out in Appendix… Opinion Personal Data Right to Restriction Criminal Data Jan 7, 2019
Opinion 26/2018 draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 26 /2018 on the draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject… Opinion ·EDPB Personal Data DPIA Monitoring Dec 4, 2018
Opinion 27/2018 draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 2 7 /2018 on the draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to… Opinion ·EDPB DPIA Privacy Impact Assessment Supervisory Authorities Dec 4, 2018
Opinion 25/2018 draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 25 /2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to… Opinion ·EDPB Personal Data DPIA Privacy Impact Assessment Dec 4, 2018
Opinion 8/2018 draft list of the competent supervisory authority of Finland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Personal Data DPIA Supervisory Authorities Oct 3, 2018
Opinion 14/2018 draft list of the competent supervisory authority of Latvia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 20/2018 draft list of the competent supervisory authority of Sweden regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 5/2018 draft list of the competent supervisory authorities of Germany regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 12/2018 draft list of the competent supervisory authority of Italy regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 11/2018 draft list of the competent supervisory authority of Ireland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 9/2018 draft list of the competent supervisory authority of France regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 15/2018 draft list of the competent supervisory authority of Malta regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 4/2018 draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 19/2018 draft list of the competent supervisory authority of Romania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 18/2018 draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 7/2018 draft list of the competent supervisory authority of Greece regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB DPIA Personal Data Supervisory Authorities Oct 3, 2018
Opinion 13/2018 draft list of the competent supervisory authority of Lithuania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring Personal Data DPIA Oct 3, 2018
Opinion 1/2018 draft list of the competent supervisory authority of Austria regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB DPIA Supervisory Authorities Personal Data Oct 3, 2018
Opinion 16/2018 draft list of the competent supervisory authority of the Netherlands regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring Personal Data DPIA Oct 3, 2018
Opinion 22/2018 draft list of the competent supervisory authority of the United Kingdom regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018