Content type · 50 documents
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data1523 Controllers1012 Supervision839 Processing833 Monitoring830 Supervisory Authorities725 Certification642 Processors471 Codes of Conduct445 Consent428 Data Controller353 International Transfer319
EDPB Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 1. Background The EDPB organise d a remote stakeholder event on 12 December 2025 to collect… Feb 18, 2026
EDPB Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency
Opinion 27/2025 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the… Oct 16, 2025
EDPB Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… Oct 13, 2025
Statement 4/2025 Statement 4/2025 on the European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Jul 14, 2025
EDPB EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Jun 25, 2025
Guidelines 02/2024 Guidelines 02/2024 on Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Jun 5, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… May 6, 2025
Statement 5/2024 Statement 5/2024 on the Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement Statement 5/2024 on the Recommendations of the High - Level Group on Access to Data for Effective Law Enforcement Adopted on 4 November 2024 The European Data Protection Board has… Nov 4, 2024
Opinion 22/2024 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Oct 9, 2024
EDPB EU-US Data Privacy Framework FAQ for European businesses Adopted EU - U.S. DATA PRIVACY FRAMEWORK F.A.Q. FOR EUROPEAN BUSINESSES 1 Adopted on 16 July 2024 1 In this context, European businesses refer to businesses in the EEA, which… Jul 16, 2024
EDPB EU-US Data Privacy Framework FAQ for European individuals Adopted EU - U.S. DATA PRIVACY FRAMEWORK F.A.Q. FOR EUROPEAN INDIVIDUALS 1 Adopted on 16 July 2024 1 In this context, European individuals means any natural person, regardless of… Jul 16, 2024
Guidelines 01/2023 Guidelines 01/2023 on Article 37 Law Enforcement Directive Adopted 1 Guidelines 0 1 / 2023 on Article 37 Law Enforcement Directive V ersion 2 . 1 Adopted on 19 June 2024 Adopted 2 Version history Version 1.0 27 September 2023 Adoption of… Jun 19, 2024
annual report 2023 EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Apr 23, 2024
Opinion 08/2024 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Apr 17, 2024
Statement 1/2024 Statement 1/2024 on legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse 1 Statement 1/2024 on legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse Adopted on 13 February 2024 The… Feb 14, 2024
Opinion 37/2023 Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Art. 43.3 1 Adopted Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification… Dec 21, 2023
Opinion 01/2023 EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 EDPB - EDPS Jo in t O p in i o n 0 1 / 2 0 2 3 on t h e P roposa l f o r a Regu l a t i o n o f t h e E u rop ean Pa r l i amen t a nd o f t h e Counc i l l a y i n g d own add i… Sep 19, 2023
Opinion 15/2023 Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria Adopted 1 Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria Adopted on 19 09 2023 Adopted 2 Adopted 3… Sep 19, 2023
Statement 1/2023 Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan 1 Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan Adopted on 18 July 2023 The European Data Protection Board has adopted the following… Jul 18, 2023
Recommendations 1/2022 Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Adopted 1 Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Adopted on 20… Jun 20, 2023
EDPB Template Complaint form and Template Acknowledgement of receipt Template Complaint Form Adopted on 20 June 2023 Adopted 2 1. Introduction Before lodging a complaint, please read more about your right to lodge a complaint [ link to page with… Jun 20, 2023
annual report 2022 EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Apr 17, 2023
Guidelines 01/2022 Guidelines 01/2022 on data subject rights - Right of access Guidelines on data subject rights - Right of access Apr 17, 2023
Guidelines 9/2022 Guidelines 9/2022 on personal data breach notification under GDPR Guidelines on personal data breach notification under GDPR Apr 4, 2023
Guidelines 07/2022 Guidelines 07/2022 on certification as a tool for transfers Guidelines on certification and identifying certification criteria Feb 24, 2023
Guidelines 05/2021 Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Adopted 1 Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Version 2.0 Adopted… Feb 24, 2023
Opinion 25/2022 Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Adopted 1 Opinion 25 /2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors Adopted on 13… Sep 19, 2022
Opinion 04/2022 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse Adopted 2 EDPB-EDPS Joint Opinion 0 4/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual… Jul 28, 2022
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Adopted 1 EDPB - EDPS Joint Opinion 03 /2022 on the Proposal for a Regulation on the European Health Data Space Adopted on 12 July 2022 Adopted 2 Adopted 3 Executive Summary With… Jul 12, 2022
annual report 2021 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… May 12, 2022
Opinion 2/2022 EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) 1 Adopted EDPB - EDP S Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) Adopted… May 4, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Jan 3, 2022
Guidelines 10/2020 Guidelines 10/2020 on restrictions under Article 23 GDPR Guidelines on restrictions under Article 23 GDPR Oct 13, 2021
Guidelines 07/2020 Guidelines 07/2020 on the concepts of controller and processor in the GDPR Guidelines on the concepts of controller and processor in the GDPR Jul 7, 2021
Recommendations 01/2020 Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data Adopted 1 Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data Version 2.0 Adopted on 18 June… Jun 18, 2021
Guidelines 8/2020 Guidelines 8/2020 on the targeting of social media users Guidelines on the targeting of social media users Apr 13, 2021
Statement 03/2021 Statement 03/2021 on the ePrivacy Regulation 1 Statement 03/2021 on the ePrivacy Regulation Adopted on 9 March 2021 The European Data Protection Board has adopted the following statement: The EDPB welcomes the agreed… Mar 9, 2021
Guidelines 01/2020 Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications Adopted 1 Guidelines 0 1 / 2020 on processing personal data in the context of connected vehicles and mobility related applications Version 2 .0 Adopted on 9 March 2021 Adopted 2… Mar 9, 2021
Recommendations 01/2021 Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive 1 vo.1 Adopted Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive Adopted on 2 February 2021 2 vo.1 Adopted Version history Version 1.1 6 July… Feb 2, 2021
Guidelines 06/2020 Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR Guidelines on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Dec 15, 2020
Guidelines 2/2020 Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies Adopted 1 Guidelines 2/2020 on a rticles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non - EEA public authorities and bodies… Dec 15, 2020
EDPB Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 - Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems 1 F requently Asked Questions on the judgment of the Court of Justice of the European Union in Case C - 311/18 - Data Protection Commissioner v Facebook Ireland Ltd and… Jul 24, 2020
Opinion 16/2020 Opinion 16/2020 on the draft decision of the competent supervisory authority of the Czech Republic regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) Adopted Opinion 16 /2020 on the draft decision of the competent supervisory authority of the Czech Republic regarding the approval of the requirements for accreditation of a… May 25, 2020
Guidelines 05/2020 Guidelines 05/2020 on consent under Regulation 2016/679 Guidelines on consent May 4, 2020
EDPB Contribution of the EDPB to the evaluation of the GDPR under Article 97 1 Adopted Contribution of the EDPB to the e valuation of the GDPR under Article 97 Adopted on 18 February 2020 2 Adopted Table of content s General EDPB policy messages… Feb 18, 2020
Guidelines 1/2020 Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices 2020
Guidelines 3/2018 Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Nov 12, 2019
Guidelines 2/2019 Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects 1 Adopted Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Version 2.0 8 October… Oct 16, 2019
EDPB Article 29 Working Party - Guidelines on transparency under Regulation 2016/679 ARTICLE 29 DATA PROTECTION WORKING PARTY This Working Party was set up under Article 29 of Directive 95/46/EC. It is an independent European advisory body on data protection and… Apr 11, 2018