Content type · 108 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 108 sort newestoldest
Opinion 14/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion ·EDPB Certification Accountability Criminal Data Apr 16, 2026
Opinion 15/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion ·EDPB Certification Accountability Joint Controllers Apr 16, 2026
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Implementation Guidelines AI Enforcement Actions Telecommunications Apr 9, 2026
Report on stakeholder event on processing of personal data to target or deliver political advertisements EDPB Marketing Personal Data Right to Explanation Mar 27, 2026
EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes regarding entry conditions to the United States for EEA citizens Social Media Personal Data Special Categories of Data Mar 12, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization Implementation Guidelines Pseudonymization Feb 18, 2026
Opinion 34/2025 C.E.C.L certification criteria Greek SA ·Opinion ·EDPB Certification Supervision Accountability Dec 2, 2025
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB Legitimate Interest Application Scope: Temporal and Territorial Dimensions Data Portability Oct 13, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Prior Consultation Accountability Integrity and Confidentiality Principle Jul 22, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Prior Consultation Accountability Integrity and Confidentiality Principle Jul 22, 2025
Opinion 15/2025 certification criteria of BDO Consulting GmbH Austrian SA (AT SA) ·Opinion ·EDPB Certification Codes of Conduct Controllers Jul 14, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Supervision Processing Agreement May 6, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
Position paper on Interplay between data protection and competition law EDPB Supervision Personal Data Accountability Jan 17, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Artificial Intelligence Legitimate Interest Personal Data Dec 18, 2024
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented DE Bremen SA ·Opinion ·EDPB Certification Supervisory Authorities Supervision Dec 2, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Codes of Conduct Personal Data Jun 18, 2024
Statement 2/2024 financial data access and payments package Statement ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default May 27, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB Data Governance for AI Accountability Training Data Requirements May 24, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Identification Biometric Data May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Social Media Privacy Shield Integrity and Confidentiality Principle Apr 23, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB DPIA Privacy Impact Assessment Personal Data Apr 18, 2024
Recommendations 1/2022 Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations ·EDPB Controllers International Transfer Personal Data Jun 20, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Supervision Audit Logs May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Data Breaches Notification Obligation Controllers Apr 4, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Right to Rectification Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Lawful Basis GDPR Article 5 Principles of Processing Feb 24, 2023
Opinion 28/2022 Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Accountability Privacy by Design & Default Oct 10, 2022
Statement 03/2022 European Police Cooperation Code Statement ·EDPB Genetic Data Criminal Data Special Categories of Data Sep 12, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Opinion Minors Child Consent Telecommunications Jul 28, 2022
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Opinion Healthcare Health Data Personal Data Jul 12, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Opinion 2/2022 EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) 1 Adopted EDPB - EDP S Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) Adopted… Opinion Personal Data Healthcare Right to Restriction May 4, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Political Opinions Mar 14, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Controllers Supervisory Authorities Feb 8, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches Integrity and Confidentiality Principle Jan 3, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Criminal Data Data Subject Rights Exercise Modalities and Procedures Social Media Dec 14, 2021
Statement on the Digital Services Package and Data Strategy 1 Adopted Statement on the D igital Services Package and Data Strategy Adopted on 18 November 2021 The European Data Protection Board has adopted the following statement: Since… EDPB Data Governance for AI Genetic Data Monitoring Actions under AI Act Nov 18, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Personal Data GDPR Subject-Matter and Objectives Controllers Oct 13, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Jul 7, 2021
Guidelines 02/2021 virtual voice assistants Guidelines ·EDPB Privacy by Design Retention Period Privacy by Default Jul 7, 2021
Opinion 5/2021 EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) 1 Adopted EDPB - EDPS Joint Opinion 5 /2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmo nised rules on artificial i… Opinion Identification Biometric Data Artificial Intelligence Jun 18, 2021
EDPB Annual Report 2020 ANNUAL REPORT ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD EXECUTIVE SUMMARY ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD Further details about the EDPB can be found… Privacy Shield Social Media International Transfer Jun 2, 2021
Statement 05/2021 Data Governance Act in light of the legislative developments Statement ·EDPB Personal Data Right of Access Procedures Accountability May 20, 2021