Content type · 29 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–29 of 29 sort newestoldest
Opinion 15/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Opinion ·EDPB Certification International Transfer Material scope (GDPR) Apr 16, 2026
Opinion 14/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion ·EDPB Certification Accountability Privacy Shield Apr 16, 2026
Report on stakeholder event on processing of personal data to target or deliver political advertisements EDPB Marketing Personal Data Transparency Mar 27, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization Implementation Guidelines Accountability Feb 18, 2026
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Opinion ·EDPB Monitoring Privacy Shield International Transfer Oct 16, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Opinion 26/2024 “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented DE Bremen SA ·Opinion ·EDPB Certification Accountability Personal Data Dec 2, 2024
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities IP Address May 24, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Supervision Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Controllers Apr 4, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media GDPR Article 5 Principles of Processing Privacy by Design Feb 24, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers International Transfer Joint Controllers Feb 24, 2023
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield International Transfer Social Media May 12, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Accountability Controllers Feb 8, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Data Subject Rights Exercise Modalities and Procedures Video Surveillance Social Media Dec 14, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Personal Data GDPR Subject-Matter and Objectives Controllers Oct 13, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Jul 7, 2021
Opinion 20/2021 Tobacco Traceability System Ad opted 1 Opinion 20/2021 on Tobacco Traceability System Adopted on 18 June 2021 Ad opted 2 Contents 1. BACKGROUND ................................… Opinion ·EDPB Personal Data Joint Controllers Processing Jun 18, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
Opinion 2/2021 EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries Adopted 1 EDPB - EDPS Joint Opinion 2 /2021 on the European Commission’s Implementing Decision on standard contractual clauses for the transfer of personal data to third countries… Opinion International Transfer Controllers Personal Data Jan 14, 2021
Statement on the data protection impact of the interoperability of contact tracing apps EDPB Data Subject Rights Exercise Modalities and Procedures Healthcare Joint Controllers Jun 16, 2020
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data GDPR Subject-Matter and Objectives May 4, 2020
Guidelines 03/2020 processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak Guidelines ·EDPB Personal Data Scientific Research Healthcare Apr 21, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Privacy by Default Privacy by Design Retention Period 2020
Opinion 1/2019 EDPB-EDPS Joint Opinion 1/2019 on the processing of patients’ data and the role of the European Commission within the eHealth Digital Service Infrastructure (eHDSI) Opinion Personal Data Healthcare Health Data Jul 12, 2019
Opinion 3/2018 draft list of the competent supervisory authority of Bulgaria regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Personal Data DPIA Supervisory Authorities Oct 3, 2018
Opinion 1/2018 draft list of the competent supervisory authority of Austria regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB DPIA Supervisory Authorities Personal Data Oct 3, 2018
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB Lawful Basis Legitimate Interest Consent May 25, 2018