Skip to content
Content type · 101 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

1–50 of 101 sort newestoldest
EDPB Work Programme 2026-2027 EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an… Fines Mutual Assistance Between Member States for AI Oversight Supervision Feb 12, 2026
Opinion 34/2025 C.E.C.L certification criteria Greek SA ·Opinion ·EDPB Certification Supervision Accountability Dec 2, 2025
Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Executive summary The Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) pursue different purposes and objectives and have different scopes. While the… EDPB Cloud Computing Controllers IP Address Oct 13, 2025
Opinion 15/2025 certification criteria of BDO Consulting GmbH Austrian SA (AT SA) ·Opinion ·EDPB Certification Controllers Accountability Jul 14, 2025
Statement 4/2025 European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Statement ·EDPB Cloud Computing Personal Data Telecommunications Jul 14, 2025
Guidelines 02/2024 Article 48 GDPR Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Controllers Processors International Transfer Jun 5, 2025
Opinion 3/2025 “Lexing GDPR certification criteria” EDPB, Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”, 2025. French SA (FR SA) ·Opinion ·EDPB Certification Accountability Supervisory Authorities Apr 14, 2025
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors EDPB, EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors, 2025. Supervisory Authorities Codes of Conduct International Transfer Mar 19, 2025
Recommendations 1/2025 2027 WADA World Anti-Doping Code Recommendations ·EDPB Social Media Privacy Shield Criminal Data Feb 13, 2025
Statement 1/2025 Age Assurance Statement ·EDPB Minors Personal Data Child Consent Feb 12, 2025
EDPB Work Programme 2024-2025 The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: 1.… Anonymization Supervision Mutual Assistance Between Member States for AI Oversight Oct 9, 2024
Opinion 12/2024 “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF 1 Adopted Opinion 12 /202 4 on the draft decision of the French Supervisory Authority regarding the “ Code of Conduct for Service Providers in Clinical Research” submitted by… French SA ·Opinion ·EDPB Processors Personal Data Codes of Conduct Jun 18, 2024
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB Biometric Data Biometric Data Identification May 24, 2024
EDPB Annual Report 2023 EDPB Annual Report 2023 1 2023 ANNUAL REPORT SAFEGUARDING INDIVIDUALS' DIGITAL RIGHTS 2 FOREWORD 4 HIGHLIGHTS 2023 6 1. THE EDPB SECRETARIAT 8 1.1. MISSION AND ACTIVITIES IN 2023… Privacy Shield Social Media Privacy by Default Apr 23, 2024
Opinion 08/2024 Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms A dopted 1 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms Adopted on 17 April 2024 Adopted 2 Adopted 3 Executive… Opinion ·EDPB Legitimate Interest Consent Cookies Apr 17, 2024
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Processors Apr 17, 2023
EDPB Annual Report 2022 EDPB Annual Report 2022 1 2022 ANNUAL REPORT STREAMLINING ENFORCEMENT THROUGH COOPERATION An Executive Summary of this report, which provides an overview of key EDPB activities in… Social Media Supervision Supervisory Authorities Apr 17, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Processing Agreement Feb 24, 2023
Statement 02/2022 personal data transfers to the Russian Federation 1 Adopted Statement 02/202 2 on personal data transfers to the Russian Federation Adopted on 12 July 2022 The European Data Protection Board has adopted the following statement:… Statement ·EDPB International Transfer Privacy Shield Controllers Jul 12, 2022
Guidelines 06/2022 practical implementation of amicable settlements Guidelines on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Guidelines ·EDPB Supervision Supervisory Authorities Lawful Basis May 12, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Opinion 2/2022 EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) 1 Adopted EDPB - EDP S Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) Adopted… Opinion Personal Data Healthcare Direct Marketing May 4, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Data Breaches Notification Obligation Telecommunications Jan 3, 2022