Content type · 60 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 60 sort newestoldest
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Supervision Supervisory Authorities AI Enforcement Actions Apr 9, 2026
EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes regarding entry conditions to the United States for EEA citizens Social Media Personal Data Special Categories of Data Mar 12, 2026
Opinion 34/2025 C.E.C.L certification criteria Greek SA ·Opinion ·EDPB Certification Accountability Supervision Dec 2, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Accountability Prior Consultation Integrity and Confidentiality Principle Jul 22, 2025
EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT Accountability Prior Consultation Integrity and Confidentiality Principle Jul 22, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Child Consent Personal Data Feb 12, 2025
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Monitoring Artificial Intelligence Post-Market Monitoring for AI Systems Jul 16, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Biometric Data Identification May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media Video Surveillance Apr 23, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB DPIA Privacy Impact Assessment Personal Data Apr 18, 2024
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines IP Address Administrative Fines on Union Institutions, Bodies, Offices and Agencies May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Statement 03/2022 European Police Cooperation Code Statement ·EDPB Genetic Data Criminal Data Special Categories of Data Sep 12, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Inspection Access Rights and Cooperation Obligations Mar 14, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Controllers Accountability Feb 8, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Video Surveillance Data Subject Rights Exercise Modalities and Procedures Criminal Data Dec 14, 2021
Statement on the Digital Services Package and Data Strategy 1 Adopted Statement on the D igital Services Package and Data Strategy Adopted on 18 November 2021 The European Data Protection Board has adopted the following statement: Since… EDPB Data Governance for AI Unacceptable Risk AI Systems Monitoring Actions under AI Act Nov 18, 2021
Guidelines 02/2021 virtual voice assistants Guidelines ·EDPB Privacy by Design Privacy by Default Retention Period Jul 7, 2021
Opinion 5/2021 EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) 1 Adopted EDPB - EDPS Joint Opinion 5 /2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmo nised rules on artificial i… Opinion Artificial Intelligence Biometric Data Identification Jun 18, 2021
EDPB contribution to the 6th round of consultations on the draft Second Additional Protocol to the Council of Europe Budapest Convention on Cybercrime International Transfer Social Media Telecommunications May 4, 2021
EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… DPIA Supervision Certification Mar 16, 2021
Guidelines 01/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines ·EDPB Personal Data Privacy by Design Retention Period Mar 9, 2021
EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research Scientific Research Personal Data Anonymization Feb 2, 2021
EDPB Annual Report 2019 EDPB Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR STRONGER RIGHTS An Executive Summary of this report,… Privacy by Default Supervision Telecommunications May 18, 2020
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Video Surveillance Legitimate Interest Monitoring Jan 30, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Controllers Territorial scope (GDPR) Processors Nov 12, 2019
Recommendation 01/2019 draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) Recommendation ·EDPB DPIA Personal Data Processing Jul 12, 2019
Opinion 10/2019 draft list of the competent supervisory authority of Cyprus regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35(4) GDPR) A dopted 1 Opinion 10/2019 on the draft list of the competent supervisory authorit y of Cyprus regarding the processing operation s subject to the requirement of a data protection… Opinion ·EDPB DPIA Supervisory Authorities Privacy Impact Assessment Jul 12, 2019
Opinion 6/2019 draft list of the competent supervisory authority of Spain regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 6 /201 9 on the draft list of the competent supervisory authority of Spain regarding the processing… Opinion ·EDPB DPIA Supervisory Authorities Personal Data Mar 12, 2019
Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Monitoring DPIA Supervisory Authorities Jan 23, 2019
Opinion 25/2018 draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 25 /2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to… Opinion ·EDPB Personal Data DPIA Genetic Data Dec 4, 2018
Opinion 26/2018 draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 26 /2018 on the draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject… Opinion ·EDPB DPIA Personal Data Monitoring Dec 4, 2018
Opinion 27/2018 draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 2 7 /2018 on the draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to… Opinion ·EDPB DPIA Genetic Data Privacy Impact Assessment Dec 4, 2018
Opinion 13/2018 draft list of the competent supervisory authority of Lithuania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 7/2018 draft list of the competent supervisory authority of Greece regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB DPIA Personal Data Supervisory Authorities Oct 3, 2018
Opinion 12/2018 draft list of the competent supervisory authority of Italy regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 11/2018 draft list of the competent supervisory authority of Ireland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 19/2018 draft list of the competent supervisory authority of Romania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 4/2018 draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 17/2018 draft list of the competent supervisory authority of Poland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 15/2018 draft list of the competent supervisory authority of Malta regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 18/2018 draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring Personal Data DPIA Oct 3, 2018
Opinion 9/2018 draft list of the competent supervisory authority of France regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 14/2018 draft list of the competent supervisory authority of Latvia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 22/2018 draft list of the competent supervisory authority of the United Kingdom regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018