Content type · 387 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. ·Opinion ·EDPB Jun 6, 2025
Opinion 11/2025 Signify Group — controller BCRs EDPB, Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group, 2025. ·Opinion ·EDPB Jun 6, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Jun 5, 2025
Opinion 10/2025 Worldline Group — controller BCRs EDPB, Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 9/2025 Worldline Group — processor BCRs EPDB, Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 8/2025 Statkraft Group — controller BCRs BCR Beslissingen: EDPB, Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group, 2025. ·Opinion ·EDPB May 21, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB May 6, 2025
Opinion 06/2025 Opinion 06/2025 regarding the extension of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data in the United Kingdom De EDPB begrijpt de 6 maanden verlenging. Opinion ·EDPB May 6, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. ·Opinion ·EDPB Apr 14, 2025
Opinion 5/2025 Nokia Group — processor BCRs EDPB, Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
Opinion 4/2025 Nokia Group — controller BCRs EDPB, Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group, 2025. ·Opinion ·EDPB Apr 9, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB Mar 18, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Mar 14, 2025
Onderwerp: Adopted Opinion 01 / 2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group Adopted on 16 January 2025… EDPB Feb 12, 2025
Opinion 01/2025 Coface Group — controller BCRs Adopted 1 EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art.… ·Opinion ·EDPB Jan 21, 2025
Coordinated Enforcement Action, implementation of the right of access by controllers EDPB 20 jan 2025, Coordinated Enforcement Action, implementation of the right of access by controllers. EDPB Jan 20, 2025
Position paper on Interplay between data protection and competition law EDPB Jan 17, 2025
Statement 6/2024 Second Report on the Application of the General Data Protection Regulation - Fostering Cross-Regulatory Consistency and Cooperation Statement ·EDPB Dec 3, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented ·Opinion ·EDPB Dec 2, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Dec 2, 2024
Statement 5/2024 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement ·EDPB Nov 4, 2024
Statement 4/2024 recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR Statement ·EDPB Oct 9, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Oct 9, 2024
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Oct 9, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Jul 18, 2024
EU-US Data Privacy Framework FAQ for European businesses EDPB Jul 16, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Jul 16, 2024
Opinion 14/2024 Mercans Group — processor BCRs 1 Adopted Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group Adopted on 16 July 2024… ·Opinion ·EDPB Jul 16, 2024
Opinion 17/2024 FCC Group — controller BCRs 1 Adopted Opinion 17/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 15/2024 AVATURE Group — processor BCRs 1 Adopted Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group Adopted on 16 July 2024 2… ·Opinion ·EDPB Jul 16, 2024
Opinion 16/2024 AVATURE Group — controller BCRs 1 Adopted Opinion 16/ 202 4 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of th e AVATURE Group Adopted on 16 July… ·Opinion ·EDPB Jul 16, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… ·Opinion ·EDPB Jun 3, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB May 24, 2024