Content type · 74 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 74 sort newestoldest
Template for Cross-Regulatory Cooperation Agreements EDPB Supervision Public Sector Supervisory Authorities Jul 7, 2026
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Privacy by Design Right of Access Procedures DPIA Apr 9, 2026
EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Mutual Assistance Between Member States for AI Oversight Fines Certification Feb 12, 2026
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Opinion ·EDPB Monitoring Privacy Shield International Transfer Oct 16, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors Lawful Basis Jun 5, 2025
Guidelines 02/2024 Article 48 GDPR Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Opinion 06/2025 Opinion 06/2025 regarding the extension of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data in the United Kingdom De EDPB begrijpt de 6 maanden verlenging. Opinion ·EDPB Personal Data Processing Law Enforcement May 6, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Supervisory Authorities Supervision International Transfer Mar 19, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Personal Data Retention Period Storage Limitation Mar 14, 2025
Opinion 2/2025 Proposals for Council Decisions on the signing and conclusion of the Agreement between the European Union and Brazil on cooperation between Europol and the Federal Police of Brazil Opinion ·EDPS Law Enforcement Feb 24, 2025
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Certification Mutual Assistance Between Member States for AI Oversight Social Media Oct 9, 2024
Statement 3/2024 data protection authorities’ role in the Artificial Intelligence Act framework Final 1 Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Adopted on 16 July 2024 The European Data Protection Board has adopted… Statement ·EDPB Artificial Intelligence Monitoring Market Surveillance and Control of AI Systems Jul 16, 2024
Guidelines 01/2023 Article 37 Law Enforcement Directive Guidelines ·EDPB Recipient Law Enforcement Accountability Jun 19, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Codes of Conduct Personal Data Jun 18, 2024
Opinion 10/2024 approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) 1 Adopted Opinion 10 / 2024 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a certification… competent SA of Sweden ·Opinion ·EDPB Certification Supervisory Authorities Supervision Jun 3, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Social Media Privacy Shield Mutual Assistance Between Member States for AI Oversight Apr 23, 2024
EDPB Strategy 2024-2027 The mission and legal task of the European Data Protection Board (EDPB) is to ensure the consistent application of EU data protection rules and to promote effective cooperation… Supervision AI Corrective Powers Law Enforcement Apr 18, 2024
EDPB Article 97 GDPR application report: GDPR successful but improvements needed 1 Adop ted Contribution of the EDPB to the report on the application of the GDPR under Article 97 Adopted on 12 December 2023 2 Adop ted 3 Adop ted Ge neral EDPB policy messages 1… Certification Video Surveillance Mutual Assistance Between Member States for AI Oversight Dec 15, 2023
Guidelines 03/2021 application of Article 65(1)(a) GDPR Guidelines on the application of Article 60 GDPR Guidelines ·EDPB Supervision Supervisory Authorities Right to Object May 24, 2023
Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB Biometric Data Video Surveillance Biometric Data May 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Notification Obligation Data Breaches Controllers Apr 4, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Social Media Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Prior Consultation Privacy by Design & Default Feb 24, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Report of the work undertaken by the Cookie Banner Taskforce EDPB Cookies Telecommunications Direct Marketing Jan 18, 2023
Statement 03/2022 European Police Cooperation Code Statement ·EDPB Genetic Data Criminal Data Special Categories of Data Sep 12, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Opinion Minors Telecommunications Child Consent Jul 28, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Guidelines 06/2022 practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Guidelines ·EDPB Supervision Supervisory Authorities Lawful Basis May 12, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Privacy Shield Mar 14, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Mutual Assistance Between Member States for AI Oversight Video Surveillance AI Investigative Powers Dec 14, 2021
Statement on the Digital Services Package and Data Strategy 1 Adopted Statement on the D igital Services Package and Data Strategy Adopted on 18 November 2021 The European Data Protection Board has adopted the following statement: Since… EDPB Data Governance for AI Genetic Data Unacceptable Risk AI Systems Nov 18, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB GDPR Subject-Matter and Objectives Personal Data Controllers Oct 13, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Jul 7, 2021
Guidelines 02/2021 virtual voice assistants Guidelines ·EDPB Privacy by Design Privacy by Default Retention Period Jul 7, 2021
One-Stop-Shop Leaflet EDPB Supervision Supervisory Authorities Public Authority Jun 29, 2021
Opinion 5/2021 EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) 1 Adopted EDPB - EDPS Joint Opinion 5 /2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmo nised rules on artificial i… Opinion Biometric Data Artificial Intelligence Identification Jun 18, 2021
EDPB contribution to the 6th round of consultations on the draft Second Additional Protocol to the Council of Europe Budapest Convention on Cybercrime International Transfer Social Media Telecommunications May 4, 2021
Statement 04/2021 international agreements including transfers 1 Adopted Statement 04/2021 on i nternational agreements including transfers Adopted on 13 April 2021 The European Data Protection Board has adopted the following statement: As… Statement ·EDPB International Transfer Privacy Shield Social Media Apr 13, 2021
Opinion 04/2021 EDPB-EDPS Joint Opinion 04/2021 on the Proposal for a Regulation of the European Parliament and of the Council on a framework for the issuance, verification and acceptance of interoperable certificates on vaccination, testing and recovery Opinion Personal Data Healthcare Privacy by Design & Default Mar 31, 2021
EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… DPIA Certification Supervision Mar 16, 2021
Opinion 03/2021 EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act) 1 Adopted EDPB - EDPS Joint Opinion 03 /2021 on the Proposal for a regulation of the European Parliament and of the Coun cil on European data governance (Data Governance Act)… Opinion Personal Data Data Governance for AI Accountability Mar 11, 2021
Guidelines 09/2020 relevant and reasoned objection under Regulation 2016/679 Guidelines ·EDPB Supervision Right to Rectification Personal Data Mar 9, 2021
Recommendations 01/2021 adequacy referential under the Law Enforcement Directive 1 vo.1 Adopted Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive Adopted on 2 February 2021 2 vo.1 Adopted Version history Version 1.1 6 July… Recommendations ·EDPB Personal Data Archiving Material scope (GDPR) Feb 2, 2021
Guidelines 2/2020 articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies Guidelines ·EDPB Personal Data International Transfer Public Sector Dec 15, 2020
Guidelines 06/2020 interplay of the Second Payment Services Directive and the GDPR Guidelines on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB GDPR Subject-Matter and Objectives Personal Data Lawful Basis Dec 15, 2020