Content type · 362 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
51–100 of 362 sort newestoldest
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Dutch SA ·Opinion ·EDPB Social Media International Transfer Controllers Jun 6, 2025
Opinion 12/2025 Proposal for a Regulation amending Regulation (EU) 2021/2115 and Regulation (EU) 2021/2116, in particular as regards data and interoperability governance Adopted Opinion 12 /2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on 4 June 2025 2… Opinion ·EDPS Social Media Controllers Personal Data Jun 6, 2025
Opinion 11/2025 Signify Group — controller BCRs EDPB, Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group, 2025. Dutch SA ·Opinion ·EDPB Social Media International Transfer Personal Data Jun 6, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Guidelines 02/2024 Article 48 GDPR Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Opinion 10/2025 Worldline Group — controller BCRs EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. French SA ·Opinion ·EDPB Social Media International Transfer Controllers May 21, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. French SA ·Opinion ·EDPB Processors Social Media Codes of Conduct May 21, 2025
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. Norwegian SA ·Opinion ·EDPB Social Media International Transfer Controllers May 21, 2025
EDPB-EDPS Letter on European Commission draft proposal on simplification of record-keeping under the GDPR "Based on the information available, and subject to a full analysis of the specific proposal, the EDPB and EDPS can express preliminary support to this targeted simplification… Controllers Human Resources Personal Data May 19, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Supervision Privacy Shield May 6, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. French SA (FR SA) ·Opinion ·EDPB Certification Accountability Supervisory Authorities Apr 14, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. Finnish SA ·Opinion ·EDPB Social Media Processors International Transfer Apr 9, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. Finnish SA ·Opinion ·EDPB Social Media Controllers International Transfer Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Supervisory Authorities Codes of Conduct Controllers Mar 19, 2025
Opinion 2/2025 Alfa Laval Group — controller BCRs Swedish SA ·Opinion ·EDPB Social Media International Transfer Controllers Mar 14, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Child Consent Personal Data Feb 12, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Social Media Personal Data Codes of Conduct Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… French SA ·Opinion ·EDPB Social Media Controllers International Transfer Jan 21, 2025
Coordinated Enforcement Action, implementation of the right of access by controllers EDPB 20 jan 2025, Coordinated Enforcement Action, implementation of the right of access by controllers. EDPB Supervision Right of Access Right of Access Procedures Jan 20, 2025
Position paper on Interplay between data protection and competition law EDPB Supervision Personal Data Supervisory Authorities Jan 17, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Artificial Intelligence Legitimate Interest Personal Data Dec 18, 2024
Opinion 24/2024 Infosys Group — controller BCRs Hesse SA (Germany) ·Opinion ·EDPB Social Media International Transfer Controllers Dec 2, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Controllers Privacy by Design & Default Dec 2, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented DE Bremen SA ·Opinion ·EDPB Certification Supervisory Authorities Accountability Dec 2, 2024
Opinion 25/2024 Infosys Group — processor BCRs Hesse SA (Germany) ·Opinion ·EDPB Processors Social Media International Transfer Dec 2, 2024
Opinion 23/2024 Aptiv Group — controller BCRs Irish SA ·Opinion ·EDPB Social Media International Transfer Controllers Nov 11, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Processors Controllers Accountability Oct 9, 2024
Statement 4/2024 recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR Statement ·EDPB Supervision Right of Access Procedures Supervisory Authorities Oct 9, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Supervision Personal Data Certification Oct 9, 2024
Opinion 21/2024 Talan Group — processor BCRs French SA ·Opinion ·EDPB Social Media Processors International Transfer Sep 17, 2024
Opinion 20/2024 Viega Group — controller BCRs North Rhine-Westphalian SA ·Opinion ·EDPB Social Media International Transfer Controllers Sep 17, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Privacy by Design Processing Agreement Jul 18, 2024
Opinion 18/2024 DSGVO-zt GmbH certification criteria Austrian SA ·Opinion ·EDPB Certification Supervisory Authorities Controllers Jul 18, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Privacy Shield Certification Human Resources Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… Spanish SA ·Opinion ·EDPB Social Media Controllers International Transfer Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… Estonian SA ·Opinion ·EDPB Processors Social Media Personal Data Jul 16, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… Spanish SA ·Opinion ·EDPB Social Media Processors Personal Data Jul 16, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… Spanish SA ·Opinion ·EDPB Social Media Controllers International Transfer Jul 16, 2024
Guidelines 01/2023 Article 37 Law Enforcement Directive Guidelines ·EDPB Law Enforcement Recipient Accountability Jun 19, 2024
Opinion 13/2024 Ivoclar Vivadent Group — controller BCRs SA of Liechtenstein ·Opinion ·EDPB Social Media International Transfer Controllers Jun 18, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Personal Data Codes of Conduct Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… competent SA of Sweden ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jun 3, 2024
Statement 2/2024 financial data access and payments package Statement ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default May 27, 2024
Opinion 9/2024 Genpact Group — processor BCRs Romanian SA ·Opinion ·EDPB Social Media Processors Codes of Conduct May 27, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Biometric Data Identification May 24, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB AI Information Duties Right to Explanation Accountability May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media Privacy by Default Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria German North Rhine Westphalia SA ·Opinion ·EDPB Certification Accountability Codes of Conduct Apr 19, 2024