Content type · 252 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Jun 5, 2025
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 10/2025 Worldline Group — controller BCRs EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB May 6, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. ·Opinion ·EDPB Apr 14, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Opinion 4/2025 EU-Singapore Digital Trade Agreement EDPS Opinion 4/2025 on the Proposals for Council Decisions on the signing and conclusion, on behalf of the Union, of the Digital Trade Agreement between the European Union and the… Opinion ·EDPS Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB Mar 18, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… ·Opinion ·EDPB Jan 21, 2025
Statement 6/2024 Second Report on the Application of the General Data Protection Regulation - Fostering Cross-Regulatory Consistency and Cooperation Statement ·EDPB Dec 3, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Dec 2, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Oct 9, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Jul 18, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… ·Opinion ·EDPB Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… ·Opinion ·EDPB Jul 16, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB May 24, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024
Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… EDPB Apr 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria ·Opinion ·EDPB Apr 19, 2024
EDPB Strategy 2024-2027 The mission and legal task of the European Data Protection Board (EDPB) is to ensure the consistent application of EU data protection rules and to promote effective cooperation… Apr 18, 2024