Content type · 151 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
51–100 of 151 sort newestoldest
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Privacy Shield Mar 14, 2022
Opinion 1/2022 EDPB-EDPS Joint Opinion 1/2022 on the extension of the Covid-19 certificate Regulation Adopted 1 EDPB - EDPS Joint Opinion 1 /2022 on t he Proposal for a Regulation of the European Parliament and of the Council amending Regulation (EU) 2021/953 on a framework for… Opinion Personal Data Healthcare Processing Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Controllers Supervisory Authorities Feb 8, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 AI Investigative Powers Criminal Data Data Subject Rights Exercise Modalities and Procedures Dec 14, 2021
Opinion 35/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent SA of Belgium ·Opinion ·EDPB Certification Supervisory Authorities Supervision Nov 30, 2021
Opinion 38/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 38 /2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification… competent SA of Latvia ·Opinion ·EDPB Supervisory Authorities Certification Supervision Nov 20, 2021
Statement on the Digital Services Package and Data Strategy 1 Adopted Statement on the D igital Services Package and Data Strategy Adopted on 18 November 2021 The European Data Protection Board has adopted the following statement: Since… EDPB Data Governance for AI Unacceptable Risk AI Systems Monitoring Actions under AI Act Nov 18, 2021
Opinion 25/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 25 / 2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a… competent SA of Lithuania ·Opinion ·EDPB Supervisory Authorities Certification Supervision Jul 20, 2021
Opinion 5/2021 EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) 1 Adopted EDPB - EDPS Joint Opinion 5 /2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmo nised rules on artificial i… Opinion Identification Artificial Intelligence Biometric Data Jun 18, 2021
EDPB Annual Report 2020 ANNUAL REPORT ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD EXECUTIVE SUMMARY ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD Further details about the EDPB can be found… Privacy Shield International Transfer Social Media Jun 2, 2021
Opinion 19/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 19 / 2021 on the draft decision of the competent supervisory authority of Hungary regarding the approval of the requirements for accreditation of a certification… competent SA of Hungary ·Opinion ·EDPB Supervisory Authorities Certification Supervision Jun 1, 2021
Statement 05/2021 Data Governance Act in light of the legislative developments Statement ·EDPB Personal Data Privacy Impact Assessment Accountability May 20, 2021
Opinion 16/2021 “EU Data Protection Code of Conduct for Cloud Service Providers” submitted by Scope Europe Belgian SA ·Opinion ·EDPB Processing Codes of Conduct Supervision May 19, 2021
Opinion 17/2021 European code of conduct submitted by the Cloud Infrastructure Service Providers (CISPE) French SA ·Opinion ·EDPB Processors Monitoring Codes of Conduct May 19, 2021
EDPB contribution to the 6th round of consultations on the draft Second Additional Protocol to the Council of Europe Budapest Convention on Cybercrime International Transfer Social Media Telecommunications May 4, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
Opinion 04/2021 EDPB-EDPS Joint Opinion 04/2021 on the Proposal for a Regulation of the European Parliament and of the Council on a framework for the issuance, verification and acceptance of interoperable certificates on vaccination, testing and recovery Opinion Personal Data Healthcare Privacy by Design & Default Mar 31, 2021
Opinion 12/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 12 / 2021 o n the draft decision of the competent supervisory authority of Portugal regarding the approval of the requirements for accreditation of a… competent SA of Portugal ·Opinion ·EDPB Supervisory Authorities Certification Supervision Mar 23, 2021
Opinion 13/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 13 / 2021 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a certification… competent SA of Romania ·Opinion ·EDPB Certification Supervisory Authorities Supervision Mar 23, 2021
Guidelines 09/2020 relevant and reasoned objection under Regulation 2016/679 Guidelines ·EDPB Supervision Lawful Basis Right to Rectification Mar 9, 2021
Statement 02/2021 new draft provisions of the second additional protocol to the Council of Europe Convention on Cybercrime (Budapest Convention) 1 [ vo.1 ] [ adopted] Statement 0 2 /2021 on new draft provisions of the second additional protocol to the Council of Europe Convention on Cybercrime (Budapest Convention) Adopted… Statement ·EDPB Telecommunications International Transfer Personal Data Feb 2, 2021
Opinion 05/2021 draft Administrative Arrangement for the transfer of personal data between the Haut Conseil du Commissariat aux Comptes (H3C) and the Public Company Accounting Oversight Board (PCAOB) Opinion ·EDPB Personal Data Supervisory Authorities Controllers Feb 2, 2021
EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research Scientific Research Personal Data Genetic Data Feb 2, 2021
Recommendations 01/2021 adequacy referential under the Law Enforcement Directive 1 vo.1 Adopted Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive Adopted on 2 February 2021 2 vo.1 Adopted Version history Version 1.1 6 July… Recommendations ·EDPB Personal Data Integrity and Confidentiality Principle Fairness & Transparency Feb 2, 2021
Information note on data transfers under the GDPR to the United Kingdom after the transition period - update 13/01/2021 EDPB International Transfer Privacy Shield Processing Agreement Jan 13, 2021
Guidelines 2/2020 articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies Guidelines ·EDPB Personal Data International Transfer Public Sector Dec 15, 2020
Opinion 26/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 26 /2020 on the draft decision of the com petent supervisory authority of Denmark regarding the approval of the requirements for accreditation of a certification… competent SA of Denmark ·Opinion ·EDPB Certification Supervisory Authorities Supervision Dec 7, 2020
Opinion 30/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 30 /2020 on the draft decision of the competent supervisory authority of Austria regarding the approval of the requirements for accreditation of a certification… competent SA of Austria ·Opinion ·EDPB Certification Supervisory Authorities Supervision Dec 7, 2020
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default Oct 20, 2020
Opinion 22/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 adopted Opinion 22 / 2020 on the draft decision of the competent supervisory authority of Greece regarding the approval of the requirements for accreditation of a certification… competent SA of Greece ·Opinion ·EDPB Certification Supervisory Authorities Supervision Aug 15, 2020
Opinion 19/2020 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 19 / 20 20 on the draft decision of the competent supervisory authority of Denmark regarding the approval of the requirements for accreditation of a code of… competent SA of Denmark ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision Aug 15, 2020
Opinion 21/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted 61 Opinion 2 1 / 2020 on the draft decision of the competent supervisory authority of the Netherlands regarding the approval of the requirements for accreditation of a… competent SA of the Netherlands ·Opinion ·EDPB Supervisory Authorities Certification Supervision Aug 15, 2020
Opinion 20/2020 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 adopted Opinion 20 / 20 20 on the draft decision of the competent supervisory authority of Greece regarding the approval of the requirements for accreditation of a code of… competent SA of Greece ·Opinion ·EDPB Monitoring Supervisory Authorities Codes of Conduct Jul 23, 2020
Guidelines 5/2019 criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) Guidelines ·EDPB Personal Data Right to be Forgotten Right to Erasure Jul 7, 2020
Statement on the data protection impact of the interoperability of contact tracing apps EDPB Data Subject Rights Exercise Modalities and Procedures Healthcare Joint Controllers Jun 16, 2020
Statement on the processing of personal data in the context of reopening of borders following the COVID-19 outbreak EDPB Personal Data Prior Consultation Privacy by Design & Default Jun 16, 2020
Opinion 12/2020 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 12 / 20 20 on the draft decision of the competent supervisory authority of Finland regarding the approval of the requirements for accreditation of a code of… competent SA of Finland ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision May 25, 2020
Opinion 15/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent supervisory authorities of Germany ·Opinion ·EDPB Certification Supervision Accountability May 25, 2020
Opinion 14/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent SA of Ireland ·Opinion ·EDPB Certification Supervisory Authorities Supervision May 25, 2020
Opinion 16/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent SA of the Czech Republic ·Opinion ·EDPB Certification Supervisory Authorities Supervision May 25, 2020
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data GDPR Subject-Matter and Objectives May 4, 2020
Opinion 7/2020 draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB DPIA Supervision Supervisory Authorities Apr 22, 2020
Guidelines 04/2020 use of location data and contact tracing tools in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Healthcare Direct Marketing Apr 21, 2020
Guidelines 03/2020 processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Scientific Research Health Data Apr 21, 2020
Opinion 5/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 GDPR competent SA of Luxembourg ·Opinion ·EDPB Supervisory Authorities Certification Supervision Jan 31, 2020
Opinion 4/2020 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 GDPR competent SA of the United Kingdom ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jan 31, 2020
Opinion 1/2020 Spanish data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR Opinion ·EDPB Supervisory Authorities Monitoring Supervision Jan 28, 2020
Opinion 3/2020 France data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR Opinion ·EDPB Monitoring Supervisory Authorities Supervision Jan 28, 2020