Content type · 73 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–50 of 73 sort newestoldest
Opinion 14/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion ·EDPB Certification Accountability Joint Controllers Apr 16, 2026
EDPB Annual Report 2025 Clarity in action: Supporting stakeholders through guidance and dialogue Annual Report 2025 Foreword 3 Highlights 4 1. The EDPB Secretariat 6 1.1 Mission And Activities 8 2.… Supervision Telecommunications Privacy by Design Apr 9, 2026
Report on stakeholder event on processing of personal data to target or deliver political advertisements EDPB Marketing Personal Data Joint Controllers Mar 27, 2026
Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 EDPB Anonymization Insurance Controllers Feb 18, 2026
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Opinion ·EDPB Monitoring Privacy Shield International Transfer Oct 16, 2025
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB IP Address Personal Data Social Media Oct 13, 2025
Opinion 16/2025 Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Opinion ·EDPB Certification Supervisory Authorities Controllers Jul 14, 2025
EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Minors Privacy by Default Privacy by Design Jun 25, 2025
Statement 2/2025 implementation of the PNR Directive in light of CJEU Judgment C-817/19 Statement Personal Data Retention Period Storage Limitation Mar 14, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
EDPB Report on the first review of the European Commission Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework Privacy Shield International Transfer Personal Data Nov 4, 2024
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Cookies Telecommunications Direct Marketing Oct 16, 2024
Statement 2/2024 financial data access and payments package Statement ·EDPB Privacy by Default Privacy by Design Privacy by Design & Default May 27, 2024
Report of the work undertaken by the ChatGPT Taskforce EDPB Training Data Requirements Corrective Actions and Duty of Information Framework Data Governance for AI May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media AI Enforcement Actions Apr 23, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria German North Rhine Westphalia SA ·Opinion ·EDPB Certification Accountability Supervisory Authorities Apr 19, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB DPIA Privacy Impact Assessment Personal Data Apr 18, 2024
Opinion 08/2024 Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Opinion ·EDPB Consent Legitimate Interest Marketing Apr 17, 2024
EDPB Article 97 GDPR application report: GDPR successful but improvements needed 1 Adop ted Contribution of the EDPB to the report on the application of the GDPR under Article 97 Adopted on 12 December 2023 2 Adop ted 3 Adop ted Ge neral EDPB policy messages 1… Certification Privacy Shield Employees Dec 15, 2023
Opinion 15/2023 Brand Compliance certification criteria Dutch SA ·Opinion ·EDPB Certification Codes of Conduct Accountability Sep 19, 2023
Statement 1/2023 first review of the functioning of the adequacy decision for Japan Statement ·EDPB Privacy Shield International Transfer Integrity and Confidentiality Principle Jul 18, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Audit Logs Social Media May 24, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right of Access Procedures Right to Rectification Apr 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Data Breaches Notification Obligation Controllers Apr 4, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Lawful Basis Feb 24, 2023
Guidelines 03/2022 Deceptive design patterns in social media platform interfaces: how to recognise and avoid them Guidelines ·EDPB Social Media Data Portability Privacy by Default Feb 24, 2023
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Controllers International Transfer Processors Feb 24, 2023
Opinion 25/2022 Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Opinion ·EDPB Certification Controllers Accountability Sep 19, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield International Transfer Social Media May 12, 2022
Opinion 2/2022 EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) 1 Adopted EDPB - EDP S Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) Adopted… Opinion Personal Data Healthcare Direct Marketing May 4, 2022
Toolbox on essential data protection safeguards for enforcement cooperation between EEA data protection authorities and competent data protection authorities of third countries EDPB Personal Data International Transfer Privacy Shield Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB Controllers International Transfer Codes of Conduct Feb 22, 2022
Opinion 1/2022 GDPR – CARPA certification criteria Luxembourg SA ·Opinion ·EDPB Certification Accountability Controllers Feb 8, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Notification Obligation Data Breaches Right to Erasure Jan 3, 2022
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Video Surveillance Social Media Mutual Assistance Between Member States for AI Oversight Dec 14, 2021
Statement on the Digital Services Package and Data Strategy 1 Adopted Statement on the D igital Services Package and Data Strategy Adopted on 18 November 2021 The European Data Protection Board has adopted the following statement: Since… EDPB Data Governance for AI Genetic Data Monitoring Actions under AI Act Nov 18, 2021
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Personal Data GDPR Subject-Matter and Objectives Controllers Oct 13, 2021
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Controllers Joint Controllers Processors Jul 7, 2021
EDPB Annual Report 2020 ANNUAL REPORT ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD EXECUTIVE SUMMARY ENSURING DATA PROTECTION RIGHTS IN A CHANGING WORLD Further details about the EDPB can be found… Social Media Privacy Shield International Transfer Jun 2, 2021
Statement 05/2021 Data Governance Act in light of the legislative developments Statement ·EDPB Personal Data Accountability Processing May 20, 2021
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… DPIA Supervision Certification Mar 16, 2021
Statement 03/2021 ePrivacy Regulation Statement ·EDPB Telecommunications Cookies Direct Marketing Mar 9, 2021
Recommendations 01/2021 adequacy referential under the Law Enforcement Directive 1 vo.1 Adopted Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive Adopted on 2 February 2021 2 vo.1 Adopted Version history Version 1.1 6 July… Recommendations ·EDPB Personal Data Fairness & Transparency Archiving Feb 2, 2021
Opinion 05/2021 draft Administrative Arrangement for the transfer of personal data between the Haut Conseil du Commissariat aux Comptes (H3C) and the Public Company Accounting Oversight Board (PCAOB) Opinion ·EDPB Personal Data Supervisory Authorities Controllers Feb 2, 2021
Guidelines 06/2020 interplay of the Second Payment Services Directive and the GDPR Guidelines on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB GDPR Subject-Matter and Objectives Personal Data Lawful Basis Dec 15, 2020