Content type · 56 documents in this view · 809 in total
Guidance
Official guidance documents, best practices, and recommendations
Filtering by Topic Clear filter Personal Data 444 Supervisory Authorities 415 Processing 413 Supervision 412 Controllers 393 Processors 338 International Transfer 296 Codes of Conduct 265 Monitoring 212 Social Media 211 Transparency 177 Public Authority 164
Opinion 13/2026 approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR ·Opinion ·EDPB May 12, 2026
Opinion 14/2026 Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Opinion ·EDPB Apr 16, 2026
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Jun 5, 2025
2025 EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Mar 19, 2025
2025 Report on the use of SPE external experts in 2024 European Data Protection Board, Report on the use of SPE external experts in 2024, 2025. EDPB Mar 18, 2025
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Oct 9, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… ·Opinion ·EDPB Jun 18, 2024
Opinion 6/2024 draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR) Opinion ·EDPB Apr 18, 2024
Opinion 04/2024 notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Opinion ·EDPB Feb 13, 2024
Guidelines 05/2021 Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR Guidelines ·EDPB Feb 24, 2023
Opinion 17/2021 European code of conduct submitted by the Cloud Infrastructure Service Providers (CISPE) ·Opinion ·EDPB May 19, 2021
Opinion 16/2021 “EU Data Protection Code of Conduct for Cloud Service Providers” submitted by Scope Europe ·Opinion ·EDPB May 19, 2021
2021 EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… Mar 16, 2021
Guidelines 2/2020 articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies Guidelines ·EDPB Dec 15, 2020
Opinion 7/2020 draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Apr 22, 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Nov 12, 2019
Opinion 12/2019 draft list of the competent supervisory authority of Spain regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 11/2019 draft list of the competent supervisory authority of the Czech Republic regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 13/2019 draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR) Opinion ·EDPB Jul 12, 2019
Opinion 10/2019 draft list of the competent supervisory authority of Cyprus regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35(4) GDPR) A dopted 1 Opinion 10/2019 on the draft list of the competent supervisory authorit y of Cyprus regarding the processing operation s subject to the requirement of a data protection… Opinion ·EDPB Jul 12, 2019
Opinion 7/2019 draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 7 /201 9 on the draft list of the competent supervisory authority of Iceland regarding the processing… Opinion ·EDPB Mar 12, 2019
Opinion 6/2019 draft list of the competent supervisory authority of Spain regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 6 /201 9 on the draft list of the competent supervisory authority of Spain regarding the processing… Opinion ·EDPB Mar 12, 2019
2019 EDPB Work Programme 2019-2020 1 12.02 .19 EDPB Work Program 2019/2020 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body, which contributes to the… Feb 12, 2019
Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Jan 23, 2019
Opinion 2/2019 draft list of the competent supervisory authority of Norway regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 2 /201 9 on the draft list of the competent supervisory authority of Norway regarding the processing operations… Opinion ·EDPB Jan 23, 2019
Opinion 25/2018 draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 25 /2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 26/2018 draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 26 /2018 on the draft list of the competent supervisory authority of Luxembourg regarding the processing operations subject… Opinion ·EDPB Dec 4, 2018
Opinion 27/2018 draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 2 7 /2018 on the draft list of the competent supervisory authority of Slovenia regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 24/2018 draft list of the competent supervisory authority of Denmark regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 24 /2018 on the draft list of the competent supervisory authority of Denmark regarding the processing operations subject to… Opinion ·EDPB Dec 4, 2018
Opinion 15/2018 draft list of the competent supervisory authority of Malta regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 19/2018 draft list of the competent supervisory authority of Romania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 7/2018 draft list of the competent supervisory authority of Greece regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 6/2018 draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 12/2018 draft list of the competent supervisory authority of Italy regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 4/2018 draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 3/2018 draft list of the competent supervisory authority of Bulgaria regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 18/2018 draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 16/2018 draft list of the competent supervisory authority of the Netherlands regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 21/2018 draft list of the competent supervisory authority of Slovakia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 9/2018 draft list of the competent supervisory authority of France regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 2/2018 draft list of the competent supervisory authority of Belgium regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 10/2018 draft list of the competent supervisory authority of Hungary regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 20/2018 draft list of the competent supervisory authority of Sweden regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018
Opinion 11/2018 draft list of the competent supervisory authority of Ireland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Oct 3, 2018