Content type · 87 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 87 sort newestoldest
Guidelines on processing of personal data through blockchain technologies EDPB Personal Data Cloud Computing Privacy by Design Jul 7, 2026
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Privacy by Design & Default Accountability Privacy by Design Apr 9, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization IP Address Processors Feb 18, 2026
Opinion 34/2025 C.E.C.L certification criteria Greek SA ·Opinion ·EDPB Certification Accountability Supervision Dec 2, 2025
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB Social Media Legitimate Interest Controllers Oct 13, 2025
the Recommendation for a Council Decision authorising the opening of negotiations on a framework agreement between EU and USA on the exchange of information for security screenings and identity verifications EDPS Security Sep 23, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Prior Consultation Accountability Integrity and Confidentiality Principle Jul 22, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Prior Consultation Accountability Integrity and Confidentiality Principle Jul 22, 2025
Opinion 15/2025 certification criteria of BDO Consulting GmbH Austrian SA (AT SA) ·Opinion ·EDPB Certification Supervisory Authorities Controllers Jul 14, 2025
Law & Compliance in AI Security & Data Protection (Training module) SPE document "Training curriculum on AI and data protection Law & Compliance in AI Security & Data Protection" door Dr. EDPB Security Jun 17, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Personal Data Retention Period Storage Limitation Mar 14, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
Statement 5/2024 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement ·EDPB Material scope (GDPR) Integrity and Confidentiality Principle IP Address Nov 4, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
Opinion 18/2024 DSGVO-zt GmbH certification criteria Austrian SA ·Opinion ·EDPB Certification Supervisory Authorities Controllers Jul 18, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Artificial Intelligence Monitoring Annex III Amendments Jul 16, 2024
Guidelines 01/2023 Article 37 Law Enforcement Directive Guidelines ·EDPB Law Enforcement Recipient Accountability Jun 19, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Personal Data Codes of Conduct Jun 18, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB Data Governance for AI Accountability Social Media May 24, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Biometric Data Identification May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media Mutual Assistance Between Member States for AI Oversight Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria German North Rhine Westphalia SA ·Opinion ·EDPB Certification Controllers Codes of Conduct Apr 19, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB DPIA Privacy Impact Assessment Personal Data Apr 18, 2024
Statement 1/2024 legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse Statement ·EDPB Monitoring Telecommunications Minors Feb 14, 2024
Statement 1/2023 first review of the functioning of the adequacy decision for Japan Statement ·EDPB International Transfer Privacy Shield Right to Object Jul 18, 2023
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities Video Surveillance May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… EDPB Social Media Supervision Personal Data Apr 19, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Controllers Apr 4, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Privacy by Design & Default Lawful Basis Feb 24, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Accountability Feb 24, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers International Transfer Processors Feb 24, 2023
Opinion 25/2022 Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Opinion ·EDPB Certification Controllers Accountability Sep 19, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Opinion Minors Telecommunications Child Consent Jul 28, 2022
Opinion 13/2022 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) competent SA of Bulgaria ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 4, 2022
Opinion 14/2022 approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR 1 Adopted Opinion 14 / 20 22 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a code of… competent SA of Bulgaria ·Opinion ·EDPB Supervisory Authorities Monitoring Supervision Jul 4, 2022
Response of the EDPB to the European Commission's targeted consultation on a digital euro Privacy by Design & Default Privacy by Default Privacy by Design Jun 14, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield International Transfer Social Media May 12, 2022
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Supervision Controllers Supervisory Authorities Mar 14, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Genetic Data Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches IP Address Jan 3, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Video Surveillance Criminal Data AI Investigative Powers Dec 14, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB GDPR Subject-Matter and Objectives Personal Data Controllers Oct 13, 2021
Opinion 25/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 25 / 2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a… competent SA of Lithuania ·Opinion ·EDPB Supervisory Authorities Certification Supervision Jul 20, 2021