Content type · 45 documents in this view · 809 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data 444 Supervisory Authorities 415 Processing 413 Supervision 412 Controllers 393 Processors 338 International Transfer 296 Codes of Conduct 265 Monitoring 212 Social Media 211 Transparency 177 Public Authority 164
1–45 of 45 sort newestoldest
2026 Report on stakeholder event on processing of personal data to target or deliver political advertisements EDPB Personal Data Marketing Controllers Mar 27, 2026
Opinion 4/2026 EDPB-EDPS Joint Opinion 4/2026 on the Proposal for a Cybersecurity Act 2 and the Proposal on amendments to the NIS 2 Directive Opinion Notified Body Reporting and Notification Obligations Human Resources Encryption Mar 19, 2026
2026 Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization Pseudonymization Security Feb 18, 2026
2025 Translations proofread by EDPB Members. This language version has not yet been proofread. Controllers Processors Processing
2025 Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB Controllers IP Address Data Portability Oct 13, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB International Transfer Privacy Shield Controllers Jun 5, 2025
2025 Study on the secondary use of personal data in the context of scientific research 2 This study has been prepared by Milieu under Contract No EDPS/2019/02 - 04 for the benefit of the EDPB. The study has been carried out by researchers from KU Leuven (CiTiP) and… EDPB Personal Data Statistics IP Address Apr 3, 2025
2025 hier EDPB 17 jan 2025, Guidelines 01/2025 on Pseudonymisation ➡️ Geef uw mening over deze concept richtsnoeren hier. Deadline : 28 februari 2025. De EDPB werkt ook nog aan Richtsnoeren… EDPB Pseudonymization Anonymization Security Jan 21, 2025
2025 One-Stop-Shop case digest on right of access EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het… EDPB Right of Access Legitimate Interest Personal Data Jan 16, 2025
Statement 5/2024 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement ·EDPB Supervision Integrity and Confidentiality Principle Encryption Nov 4, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Integrity and Confidentiality Principle Accountability Oct 16, 2024
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities IP Address May 24, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines GDPR Article 5 Principles of Processing Supervision May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Identification Supervision May 17, 2023
2023 Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… EDPB Supervision Supervisory Authorities Processing Agreement Apr 19, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Supervision Controllers Supervisory Authorities Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Right of Access Personal Data Right to Rectification Apr 17, 2023
2023 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Supervision Integrity and Confidentiality Principle IP Address Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Personal Data Apr 4, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Privacy by Design Privacy by Design & Default Privacy by Default Feb 24, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB Certification International Transfer Privacy Shield Feb 24, 2023
Guidelines 06/2022 practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Guidelines ·EDPB Personal Data Supervision Processing May 12, 2022
2022 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield International Transfer Integrity and Confidentiality Principle May 12, 2022
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities Controllers Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB Processing Agreement International Transfer Controllers Feb 22, 2022
Guidelines 01/2021 Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches Personal Data Jan 3, 2022
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Right to Restriction GDPR Subject-Matter and Objectives Personal Data Oct 13, 2021
Guidelines 02/2021 virtual voice assistants Guidelines ·EDPB Controllers IP Address Data Portability Jul 7, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Processors Joint Controllers Jul 7, 2021
Recommendations 01/2020 measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data Recommendations ·EDPB Personal Data Privacy Shield International Transfer Jun 18, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing IP Address GDPR Article 5 Principles of Processing Apr 13, 2021
Guidelines 09/2020 relevant and reasoned objection under Regulation 2016/679 Guidelines ·EDPB Supervision Prior Consultation Supervisory Authorities Mar 9, 2021
Guidelines 06/2020 interplay of the Second Payment Services Directive and the GDPR Guidelines on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB International Transfer Personal Data GDPR Article 5 Principles of Processing Dec 15, 2020
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Privacy by Design & Default Privacy by Default Privacy by Design Oct 20, 2020
Guidelines 5/2019 criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) Guidelines ·EDPB Right to be Forgotten Personal Data Right to Rectification Jul 7, 2020
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data IP Address May 4, 2020
Guidelines 04/2020 use of location data and contact tracing tools in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Retention Period Privacy by Default Apr 21, 2020
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Personal Data Material scope (GDPR) Processing Jan 30, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices superseded ·Guidelines ·EDPB Personal Data Privacy by Design & Default Processing Jan 28, 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Territorial scope (GDPR) IP Address Controllers Nov 12, 2019
Guidelines 1/2018 certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation Guidelines ·EDPB Certification Integrity and Confidentiality Principle IP Address Jun 4, 2019
Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB Accountability IP Address GDPR Article 5 Principles of Processing Jun 4, 2019
Opinion 5/2019 interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities Opinion ·EDPB Supervisory Authorities Telecommunications Supervision Mar 12, 2019
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB Privacy Shield Legitimate Interest Processing Agreement May 25, 2018
2018 Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods Apr 11, 2018