Content type · 270 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Jun 5, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 10/2025 Worldline Group — controller BCRs EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. ·Opinion ·EDPB May 21, 2025
EDPB-EDPS Letter on European Commission draft proposal on simplification of record-keeping under the GDPR "Based on the information available, and subject to a full analysis of the specific proposal, the EDPB and EDPS can express preliminary support to this targeted simplification… May 19, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB May 6, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. ·Opinion ·EDPB Apr 14, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… ·Opinion ·EDPB Jan 21, 2025
Position paper on Interplay between data protection and competition law EDPB Jan 17, 2025
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Dec 2, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Oct 9, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Jul 18, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… ·Opinion ·EDPB Jul 16, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… ·Opinion ·EDPB Jul 16, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Jun 3, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria ·Opinion ·EDPB Apr 19, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB Apr 18, 2024
Opinion 04/2024 notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Opinion ·EDPB Feb 13, 2024
Opinion 37/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Dec 21, 2023