Content type · 417 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
51–100 of 417 sort newestoldest
Statement 4/2025 European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Statement ·EDPB Cloud Computing Personal Data Telecommunications Jul 14, 2025
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Opinion ·EDPB Certification Codes of Conduct Controllers Jul 14, 2025
Opinion 14/2025 Wilh. Wilhelmsen Group — controller BCRs EDPB, Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Norwegian SA ·Opinion ·EDPB Social Media Controllers International Transfer Jul 10, 2025
EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Minors Privacy by Default Privacy by Design Jun 25, 2025
Fundamentals of Secure AI Systems with Personal Data (Training module) SPE document "Training curriculum on AI and data protection Fundamentals of Secure AI Systems with Personal Data" door Dr. EDPB AI Conformity Declaration Artificial Intelligence Personal Data Jun 17, 2025
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Dutch SA ·Opinion ·EDPB Social Media International Transfer Controllers Jun 6, 2025
Opinion 11/2025 Signify Group — controller BCRs EDPB, Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group, 2025. Dutch SA ·Opinion ·EDPB Social Media Controllers International Transfer Jun 6, 2025
Opinion 12/2025 Proposal for a Regulation amending Regulation (EU) 2021/2115 and Regulation (EU) 2021/2116, in particular as regards data and interoperability governance Adopted Opinion 12 /2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on 4 June 2025 2… Opinion ·EDPS Social Media Controllers Codes of Conduct Jun 6, 2025
Guidelines 02/2024 Article 48 GDPR Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors Lawful Basis Jun 5, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. French SA ·Opinion ·EDPB Processors Social Media International Transfer May 21, 2025
Opinion 10/2025 Worldline Group — controller BCRs EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. French SA ·Opinion ·EDPB Social Media Controllers International Transfer May 21, 2025
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. Norwegian SA ·Opinion ·EDPB Social Media International Transfer Controllers May 21, 2025
EDPB-EDPS Letter on European Commission draft proposal on simplification of record-keeping under the GDPR "Based on the information available, and subject to a full analysis of the specific proposal, the EDPB and EDPS can express preliminary support to this targeted simplification… Controllers Human Resources Processors May 19, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Supervision Right of Access Procedures May 6, 2025
Opinion 06/2025 Opinion 06/2025 regarding the extension of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data in the United Kingdom De EDPB begrijpt de 6 maanden verlenging. Opinion ·EDPB Personal Data Processing Law Enforcement May 6, 2025
Guidelines 02/2025 processing of personal data through blockchain technologies EDPB, Guidelines 02/2025 on processing of personal data through blockchain technologies, 2025. Guidelines ·EDPB Personal Data Processing Human Resources Apr 21, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. French SA (FR SA) ·Opinion ·EDPB Certification Accountability Supervisory Authorities Apr 14, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. Finnish SA ·Opinion ·EDPB Social Media International Transfer Controllers Apr 9, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. Finnish SA ·Opinion ·EDPB Processors Social Media International Transfer Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Supervisory Authorities Supervision Controllers Mar 19, 2025
Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB AI Enforcement Actions Supervision Cloud Computing Mar 18, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Personal Data Retention Period Storage Limitation Mar 14, 2025
Opinion 2/2025 Alfa Laval Group — controller BCRs Swedish SA ·Opinion ·EDPB Social Media International Transfer Controllers Mar 14, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Personal Data Social Media Controllers Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… French SA ·Opinion ·EDPB Social Media Controllers International Transfer Jan 21, 2025
Coordinated Enforcement Action, implementation of the right of access by controllers EDPB 20 jan 2025, Coordinated Enforcement Action, implementation of the right of access by controllers. EDPB Supervision Right of Access Right of Access Procedures Jan 20, 2025
Position paper on Interplay between data protection and competition law EDPB Supervision Personal Data Accountability Jan 17, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Legitimate Interest Artificial Intelligence Personal Data Dec 18, 2024
Statement 6/2024 Second Report on the Application of the General Data Protection Regulation - Fostering Cross-Regulatory Consistency and Cooperation Statement ·EDPB Human Resources Supervision Mutual Assistance Between Member States for AI Oversight Dec 3, 2024
Opinion 24/2024 Infosys Group — controller BCRs Hesse SA (Germany) ·Opinion ·EDPB Social Media Controllers International Transfer Dec 2, 2024
Opinion 25/2024 Infosys Group — processor BCRs Hesse SA (Germany) ·Opinion ·EDPB Social Media Processors Codes of Conduct Dec 2, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification DPIA Accountability Dec 2, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented DE Bremen SA ·Opinion ·EDPB Certification Accountability Controllers Dec 2, 2024
Opinion 23/2024 Aptiv Group — controller BCRs Irish SA ·Opinion ·EDPB Social Media International Transfer Controllers Nov 11, 2024
EDPB Report on the first review of the European Commission Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework Privacy Shield International Transfer Personal Data Nov 4, 2024
Statement 5/2024 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement ·EDPB Material scope (GDPR) Integrity and Confidentiality Principle Privacy by Design & Default Nov 4, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Personal Data Social Media Certification Oct 9, 2024
Statement 4/2024 recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR Statement ·EDPB Supervision Supervisory Authorities Right of Access Procedures Oct 9, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Processors Controllers Accountability Oct 9, 2024
Opinion 21/2024 Talan Group — processor BCRs French SA ·Opinion ·EDPB Social Media Processors Controllers Sep 17, 2024
Opinion 20/2024 Viega Group — controller BCRs North Rhine-Westphalian SA ·Opinion ·EDPB Social Media International Transfer Controllers Sep 17, 2024
Opinion 18/2024 DSGVO-zt GmbH certification criteria Austrian SA ·Opinion ·EDPB Certification Controllers Supervisory Authorities Jul 18, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Processing Agreement Privacy by Design & Default Jul 18, 2024
EU-US Data Privacy Framework FAQ for European individuals EDPB Privacy Shield Human Resources Fairness & Transparency Jul 16, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Certification Privacy Shield Human Resources Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… Spanish SA ·Opinion ·EDPB Social Media Controllers International Transfer Jul 16, 2024