Content type · 350 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB May 6, 2025
SPE Programma - AI Privacy Risks & Mitigations Large Language Models (LLMs) (Isabel BARBERÁ) "The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical… EDPB Apr 21, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. ·Opinion ·EDPB Apr 14, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Mar 14, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… ·Opinion ·EDPB Jan 21, 2025
Position paper on Interplay between data protection and competition law EDPB Jan 17, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Dec 18, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Dec 2, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024
Statement 4/2024 recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR Statement ·EDPB Oct 9, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Jul 18, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Jul 16, 2024
EU-US Data Privacy Framework FAQ for European individuals EDPB Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… ·Opinion ·EDPB Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… ·Opinion ·EDPB Jul 16, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Jun 3, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB May 24, 2024
Information Note on the Data Privacy Framework redress mechanism for national security purposes 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent… EDPB Apr 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria ·Opinion ·EDPB Apr 19, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB Apr 18, 2024
Statement 1/2024 legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse Statement ·EDPB Feb 14, 2024
Opinion 04/2024 notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Opinion ·EDPB Feb 13, 2024
Opinion 38/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Dec 21, 2023
Opinion 37/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Dec 21, 2023