Content type · 362 documents in this view · 804 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB 2020
Opinion 17/2019 UK data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR Opinion ·EDPB Dec 2, 2019
EU - U.S. Privacy Shield - Third Annual Joint Review report – 12/11/2019 1 Adopted EU - U.S. Privacy Shield - Third Annual Joint Review Adopted on 12 November 2019 2 Adopted 4 Adopted The European Data Protection Board Having regard to Article 4 and… EDPB Nov 12, 2019
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Nov 12, 2019
Guidelines 2/2019 processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects 1 Adopted Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Version 2.0 8 October… Guidelines ·EDPB Oct 16, 2019
EDPB Annual Report 2018 EDPB Annual Report 2018 1 EDPB Annual Report 2018 1 European Data Protection Board 2018 Annual Report Cooperation & Transparency An Executive Summary of this report, which gives… Jul 16, 2019
Opinion 10/2019 draft list of the competent supervisory authority of Cyprus regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35(4) GDPR) A dopted 1 Opinion 10/2019 on the draft list of the competent supervisory authorit y of Cyprus regarding the processing operation s subject to the requirement of a data protection… Opinion ·EDPB Jul 12, 2019
Opinion 13/2019 draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 11/2019 draft list of the competent supervisory authority of the Czech Republic regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 14/2019 draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 8/2019 competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment Opinion ·EDPB Jul 12, 2019
Opinion 1/2019 EDPB-EDPS Joint Opinion 1/2019 on the processing of patients’ data and the role of the European Commission within the eHealth Digital Service Infrastructure (eHDSI) Opinion Jul 12, 2019
Opinion 9/2019 Austrian data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR Opinion ·EDPB Jul 12, 2019
Recommendation 01/2019 draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) Recommendation ·EDPB Jul 12, 2019
Opinion 12/2019 draft list of the competent supervisory authority of Spain regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Guidelines 1/2018 certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation Guidelines ·EDPB Jun 4, 2019
Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB Jun 4, 2019
Opinion 6/2019 draft list of the competent supervisory authority of Spain regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 6 /201 9 on the draft list of the competent supervisory authority of Spain regarding the processing… Opinion ·EDPB Mar 12, 2019
Opinion 5/2019 interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities Opinion ·EDPB Mar 12, 2019
Opinion 7/2019 draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 7 /201 9 on the draft list of the competent supervisory authority of Iceland regarding the processing… Opinion ·EDPB Mar 12, 2019
EDPB LIBE report on the implementation of GDPR 1 First overview on the implementation of the GDPR and the roles and means of the national supervisory authorities Executive Summary This document sets out an overview of the… Feb 26, 2019
Information note on data transfers under the GDPR in the event of a no-deal Brexit EDPB Feb 12, 2019
Opinion 4/2019 draft AA between EEA and non-EEA Financial Supervisory Authorities adopted 1 Opinion 4 / 2019 on the draft Administrative Arrangement for the transfer of personal data between European Economic Area (“EEA”) Financial Supervisory Authorities and… Opinion ·EDPB Feb 12, 2019
EDPB Work Programme 2019-2020 1 12.02 .19 EDPB Work Program 2019/2020 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body, which contributes to the… Feb 12, 2019
Opinion 2/2019 draft list of the competent supervisory authority of Norway regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 2 /201 9 on the draft list of the competent supervisory authority of Norway regarding the processing operations… Opinion ·EDPB Jan 23, 2019
Opinion 3/2019 Opinion 3/2019 concerning the Questions and Answers on the interplay between the Clinical Trials Regulation (CTR) and the General Data Protection regulation (GDPR) Opinion ·EDPB Jan 23, 2019
Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Jan 23, 2019
EU - U.S. Privacy Shield - Second Annual Joint Review report – 22/01/2019 1 Adopted EU - U.S. Privacy Shield - Second Annual Joint Review Adopted on 22 January 2019 2 Adopted 4 Adopted The European Data Protection Board Having regard to Article 4 and… EDPB Jan 22, 2019
Guidelines 4/2018 accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679) Guidelines ·EDPB Dec 14, 2018
Opinion 27/2018 draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 2 7 /2018 on the draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 25/2018 draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 25 /2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 26/2018 draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 26 /2018 on the draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject… Opinion ·EDPB Dec 4, 2018
Opinion 24/2018 draft list of the competent supervisory authority of Denmark regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 24 /2018 on the draft list of the competent supervisory authority of Denmark regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 11/2018 draft list of the competent supervisory authority of Ireland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 21/2018 draft list of the competent supervisory authority of Slovakia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 1/2018 draft list of the competent supervisory authority of Austria regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 14/2018 draft list of the competent supervisory authority of Latvia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 10/2018 draft list of the competent supervisory authority of Hungary regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 22/2018 draft list of the competent supervisory authority of the United Kingdom regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 2/2018 draft list of the competent supervisory authority of Belgium regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 20/2018 draft list of the competent supervisory authority of Sweden regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 7/2018 draft list of the competent supervisory authority of Greece regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 9/2018 draft list of the competent supervisory authority of France regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 6/2018 draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 12/2018 draft list of the competent supervisory authority of Italy regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 18/2018 draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018