Content type · 35 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–35 of 35 sort newestoldest
Opinion 4/2026 Proposal for a Regulation establishing a framework of measures to facilitate the transport of military equipment, goods and personnel across the Union Opinion 4 / 2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABB Group Adopted on 15 January 2026 1 | 2 | The… Opinion ·EDPS Social Media International Transfer Controllers Mar 19, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization IP Address Joint Controllers Feb 18, 2026
Translations proofread by EDPB Members. This language version has not yet been proofread. Controllers Processors Processing
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB Right of Access Procedures Controllers Application Scope: Temporal and Territorial Dimensions Oct 13, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors Lawful Basis Jun 5, 2025
Statement 5/2024 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement ·EDPB Material scope (GDPR) Integrity and Confidentiality Principle Privacy by Design & Default Nov 4, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities IP Address May 24, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Article 19 GDPR - Notification of Rectification, Erasure or Restriction Employees May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… EDPB Social Media Supervision Personal Data Apr 19, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Data Breaches Notification Obligation Controllers Apr 4, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification GDPR Article 5 Principles of Processing Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Privacy by Design Fairness & Transparency Feb 24, 2023
Guidelines 06/2022 practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Guidelines ·EDPB Supervision Supervisory Authorities Lawful Basis May 12, 2022
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Supervision Controllers Supervisory Authorities Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches Religious Beliefs Jan 3, 2022
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Personal Data GDPR Subject-Matter and Objectives Controllers Oct 13, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Jul 7, 2021
Recommendations 01/2020 measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data Recommendations ·EDPB Privacy Shield International Transfer Social Media Jun 18, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
Guidelines 09/2020 relevant and reasoned objection under Regulation 2016/679 Guidelines ·EDPB Supervision Fines Material scope (GDPR) Mar 9, 2021
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default Oct 20, 2020
Guidelines 5/2019 criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) Guidelines ·EDPB Right to be Forgotten Personal Data Right to Erasure Jul 7, 2020
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data GDPR Subject-Matter and Objectives May 4, 2020
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Video Surveillance Monitoring Legitimate Interest Jan 30, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Privacy by Default Privacy by Design Retention Period 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Controllers Territorial scope (GDPR) Representatives Nov 12, 2019
Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB GDPR Subject-Matter and Objectives Monitoring Accountability Jun 4, 2019
Guidelines 1/2018 certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation Guidelines ·EDPB Certification Accountability GDPR Subject-Matter and Objectives Jun 4, 2019
Opinion 5/2019 interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities Opinion ·EDPB Telecommunications Cookies Supervisory Authorities Mar 12, 2019
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB Lawful Basis Consent Legitimate Interest May 25, 2018