Skip to content
Content type · 46 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

1–46 of 46 sort newestoldest
Opinion 25/2025 BOX Group — processor BCRs Polish SA ·Opinion ·EDPB Processors Social Media Controllers Oct 7, 2025
Statement 4/2025 European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Statement ·EDPB Cloud Computing Telecommunications Personal Data Jul 14, 2025
Opinion 15/2025 certification criteria of BDO Consulting GmbH Austrian SA (AT SA) ·Opinion ·EDPB Certification Accountability Controllers Jul 14, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Supervision Prior Consultation May 6, 2025
SPE Programma - AI Privacy Risks & Mitigations Large Language Models (LLMs) (Isabel BARBERÁ) "The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical… EDPB Artificial Intelligence AI Risk Mitigation Risk Management System Apr 21, 2025
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Processors Controllers Accountability Oct 9, 2024
Opinion 34/2023 Cerner Group — processor BCRs Hesse SA (Germany) ·Opinion ·EDPB Processors Social Media International Transfer Dec 20, 2023
Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 1 Adopted Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 On 10 July 2023, the European… EDPB Privacy Shield International Transfer Processing Agreement Jul 18, 2023
Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… EDPB Social Media Supervision Personal Data Apr 19, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB International Transfer Certification Lawful Basis Feb 24, 2023
EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Social Media Supervisory Authorities Feb 22, 2023
Opinion 31/2022 Piano Group — processor BCRs Slovak SA ·Opinion ·EDPB Processors Social Media Controllers Nov 28, 2022
EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… Privacy Shield Social Media International Transfer May 12, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Controllers Codes of Conduct Feb 22, 2022
Opinion 20/2021 Tobacco Traceability System Ad opted 1 Opinion 20/2021 on Tobacco Traceability System Adopted on 18 June 2021 Ad opted 2 Contents 1. BACKGROUND ................................… Opinion ·EDPB Personal Data Joint Controllers Processing Jun 18, 2021
Opinion 18/2021 draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR) 1 Adopted Opinion 18 /2021 on the draft Standard Contractual Clauses sub mitted by the LT SA (Article 28( 8 ) GDPR) Adopted on 19 May 2021 2 Adopted 3 Adopted The European Data… Opinion ·EDPB Controllers Processors Processing May 19, 2021
EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… DPIA Supervision Certification Mar 16, 2021
Opinion 2/2021 EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries Adopted 1 EDPB - EDPS Joint Opinion 2 /2021 on the European Commission’s Implementing Decision on standard contractual clauses for the transfer of personal data to third countries… Opinion International Transfer Controllers Personal Data Jan 14, 2021
Opinion 17/2020 draft Standard Contractual Clauses submitted by the SI SA (Article 28(8) GDPR) 1 Adopted Opinion 17 /2020 on the draft Standard Contractual Clauses sub mitted by the SI SA (Article 28( 8 ) GDPR) Adopted on 19 May 2020 2 Adopted 4 Final Remarks… Opinion ·EDPB Controllers Processors Processing May 19, 2020
EDPB Annual Report 2019 EDPB Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR STRONGER RIGHTS An Executive Summary of this report,… Privacy by Default Supervision Privacy by Design May 18, 2020
Contribution of the EDPB to the evaluation of the GDPR under Article 97 1 Adopted Contribution of the EDPB to the e valuation of the GDPR under Article 97 Adopted on 18 February 2020 2 Adopted Table of content s General EDPB policy messages… International Transfer Supervision Video Surveillance Feb 18, 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Controllers Territorial scope (GDPR) Processors Nov 12, 2019
Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB GDPR Subject-Matter and Objectives Monitoring Accountability Jun 4, 2019
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB Lawful Basis Personal Data Consent May 25, 2018