Content type · 77 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 77 sort newestoldest
Guidelines on processing of personal data through blockchain technologies EDPB Personal Data Privacy by Design Accuracy Jul 7, 2026
Opinion 13/2026 approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR FI SA ·Opinion ·EDPB Certification Personal Data Supervisory Authorities May 12, 2026
Opinion 14/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion ·EDPB Certification Accountability Notified Body Reporting and Notification Obligations Apr 16, 2026
Opinion 15/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion ·EDPB Certification Accountability Notified Body Assessment Procedures Apr 16, 2026
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Privacy by Design & Default AI Information Duties AI Enforcement Actions Apr 9, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization Processors IP Address Feb 18, 2026
EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Fines Mutual Assistance Between Member States for AI Oversight Privacy Shield Feb 12, 2026
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Opinion ·EDPB Certification Codes of Conduct Controllers Jul 14, 2025
Opinion 15/2025 certification criteria of BDO Consulting GmbH Austrian SA (AT SA) ·Opinion ·EDPB Certification Accountability Codes of Conduct Jul 14, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Supervision Privacy by Design May 6, 2025
Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB AI Enforcement Actions Supervision Territorial scope (GDPR) Mar 18, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion ·EDPB Artificial Intelligence Legitimate Interest Personal Data Dec 18, 2024
Opinion 27/2024 Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Controllers Privacy by Design & Default Dec 2, 2024
Opinion 19/2024 EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Privacy by Design Accountability Jul 18, 2024
Guidelines 01/2023 Article 37 Law Enforcement Directive Guidelines ·EDPB Recipient Law Enforcement International Transfer Jun 19, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Personal Data Codes of Conduct Jun 18, 2024
Statement 2/2024 financial data access and payments package Statement ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default May 27, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Social Media Privacy Shield Video Surveillance Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria German North Rhine Westphalia SA ·Opinion ·EDPB Certification Supervision Supervisory Authorities Apr 19, 2024
Opinion 38/2023 approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification… competent SA of Slovenian ·Opinion ·EDPB Certification Supervisory Authorities Supervision Dec 21, 2023
EDPB Article 97 GDPR application report: GDPR successful but improvements needed 1 Adop ted Contribution of the EDPB to the report on the application of the GDPR under Article 97 Adopted on 12 December 2023 2 Adop ted 3 Adop ted Ge neral EDPB policy messages 1… Certification Mutual Assistance Between Member States for AI Oversight Employees Dec 15, 2023
Opinion 15/2023 Brand Compliance certification criteria Dutch SA ·Opinion ·EDPB Certification Codes of Conduct Controllers Sep 19, 2023
Statement 1/2023 first review of the functioning of the adequacy decision for Japan Statement ·EDPB Privacy Shield International Transfer Employees Jul 18, 2023
Opinion 12/2023 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification… competent SA of Cyprus ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jul 11, 2023
Recommendations 1/2022 Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations ·EDPB Controllers International Transfer Personal Data Jun 20, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Administrative Fines on Union Institutions, Bodies, Offices and Agencies Inspection Access Rights and Cooperation Obligations May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Controllers Apr 4, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Feb 24, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Processing Agreement Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Privacy by Design & Default Integrity and Confidentiality Principle Feb 24, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Opinion 28/2022 Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Certification Accountability DPIA Oct 10, 2022
Overview on resources made available by Member States to the Data Protection Supervisory Authorities EDPB Supervision Human Resources Supervisory Authorities Sep 5, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield International Transfer Social Media May 12, 2022
Guidelines 06/2022 practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Guidelines ·EDPB Supervision Supervisory Authorities Lawful Basis May 12, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Processing Mar 14, 2022
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Supervision Controllers Supervisory Authorities Mar 14, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Supervisory Authorities Controllers Feb 8, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Data Breaches Notification Obligation DPIA Jan 3, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Mutual Assistance Between Member States for AI Oversight Video Surveillance Criminal Data Dec 14, 2021
Opinion 38/2021 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 38 /2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification… competent SA of Latvia ·Opinion ·EDPB Certification Supervisory Authorities Supervision Nov 20, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Personal Data GDPR Subject-Matter and Objectives Controllers Oct 13, 2021
Overview on resources made available by Member States to the Data Protection Authorities and on enforcement actions by the Data Protection Authorities EDPB Human Resources Supervision Public Authority Aug 11, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Processors Joint Controllers Jul 7, 2021
Recommendations 01/2020 measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data Recommendations ·EDPB Privacy Shield International Transfer IP Address Jun 18, 2021