Skip to content
Content type · 51 documents in this view · 809 in total

Guidance

Official guidance documents, best practices, and recommendations

1–50 of 51 sort newestoldest
2026 EDPB Report on the public consultation on helpful templates for organisations to facilitate their GDPR compliance EDPB, EDPB Report on the public consultation on helpful templates for organisations to facilitate their GDPR compliance Accountability DPIA Notification Obligation Feb 12, 2026
2026 EU-U.S. Data Privacy Framework F.A.Q. for European businesses - version 2.0 EDPB, EU-U.S. Data Privacy Framework F.A.Q. for European businesses - version 2.0 EDPB Privacy Shield Certification International Transfer Jan 23, 2026
2026 EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(a) GDPR and for the Adoption of Standard Contractual Clauses under Article 46(2)(d) GDPR EDPB, EDPB Document setting forth a Cooperation Procedure for the Authorisation of Contractual Clauses under Article 46(3)(a) GDPR and for the Adoption of Standard Contractual… International Transfer Access Controls Processing Agreement Jan 22, 2026
Statement 4/2025 European Commission’s Recommendation on draft non-binding model contractual terms on data sharing under the Data Act 1 Adopted Statement 4 /2025 on the European Commission’s Recommendation on draft non - binding model contractual terms on data sharing under the Data Act (version of 22 May 2025)… Statement ·EDPB Processing Agreement Personal Data Cloud Computing Jul 14, 2025
Opinion 01/2025 EDPB- EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR De EDPB en EDPS steunen het doel om de administratieve lasten voor SMCs en MKB te verminderen, mits dit de bescherming van fundamentele rechten niet verlaagt. Ze benadrukken de… Opinion Accountability Criminal Data Processing Jul 9, 2025
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB Personal Data Privacy Shield Supervision May 6, 2025
2025 SPE Programma - AI Privacy Risks & Mitigations Large Language Models (LLMs) (Isabel BARBERÁ) "The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical… EDPB Risk Management System Monitoring Audit Logs Apr 21, 2025
2025 One-Stop-Shop case digest on right of access EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het… EDPB Right of Access Personal Data Legitimate Interest Jan 16, 2025
Opinion 22/2024 certain obligations following from the reliance on processor(s) and sub-processor(s) A dopted 1 Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub - processor(s) Adopted on 7 October 2024 Adopted 2 Executive summary The… Opinion ·EDPB Processors Controllers Processing Agreement Oct 9, 2024
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria check currency ·German North Rhine Westphalia SA ·Opinion Certification Supervision Supervisory Authorities Apr 19, 2024
Opinion 34/2023 Cerner Group — processor BCRs check currency ·Hesse SA (Germany) ·Opinion International Transfer Processors Codes of Conduct Dec 20, 2023
2023 Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 1 Adopted Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023 On 10 July 2023, the European… check currency ·EDPB Privacy Shield International Transfer Processing Agreement Jul 18, 2023
2023 Report of the work undertaken by the supervisory authorities within the 101 Taskforce Final 1 Report of the work undertaken by the supervisory authorities within the 101 Task Force 28 March 2023 Final 2 Final 3 DISCLAIMER The EDPB created the 101 Task Force to… check currency ·EDPB Supervision Processing Agreement Accountability Apr 19, 2023
Guidelines 01/2022 data subject rights - Right of access check currency ·Guidelines ·EDPB Right of Access Personal Data Right to Rectification Apr 17, 2023
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria check currency ·Guidelines ·EDPB Certification International Transfer Processing Agreement Feb 24, 2023
2023 EDPB Work Programme 2023-2024 EDPB Work Programme 2023/2024 Adopted on 14 February 2023 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established… Supervision Supervisory Authorities Controllers Feb 22, 2023
Opinion 30/2022 Piano Group — controller BCRs check currency ·Slovak SA ·Opinion International Transfer Codes of Conduct Controllers Nov 28, 2022
2022 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… check currency Privacy Shield Processing Agreement International Transfer May 12, 2022
Guidelines 02/2022 application of Article 60 GDPR check currency ·Guidelines ·EDPB Supervision Supervisory Authorities Processors Mar 14, 2022
Guidelines 04/2021 Codes of Conduct as tools for transfers Guidelines on codes of conduct and monitoring bodies Guidelines ·EDPB International Transfer Processing Agreement Codes of Conduct Feb 22, 2022
Guidelines 07/2020 concepts of controller and processor in the GDPR check currency ·Guidelines ·EDPB Controllers Processors IP Address Jul 7, 2021
Opinion 20/2021 Tobacco Traceability System Ad opted 1 Opinion 20/2021 on Tobacco Traceability System Adopted on 18 June 2021 Ad opted 2 Contents 1. BACKGROUND ................................… check currency ·Opinion ·EDPB Personal Data Access Controls Monitoring Jun 18, 2021
Opinion 18/2021 draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR) 1 Adopted Opinion 18 /2021 on the draft Standard Contractual Clauses sub mitted by the LT SA (Article 28( 8 ) GDPR) Adopted on 19 May 2021 2 Adopted 3 Adopted The European Data… check currency ·Opinion ·EDPB International Transfer Controllers Processing Agreement May 19, 2021
2021 EDPB Work Programme 2021-2022 EDPB Work Programme 2021/2022 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data… check currency Supervision International Transfer DPIA Mar 16, 2021
Opinion 2/2021 EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries Adopted 1 EDPB - EDPS Joint Opinion 2 /2021 on the European Commission’s Implementing Decision on standard contractual clauses for the transfer of personal data to third countries… check currency ·Opinion International Transfer Personal Data Processing Agreement Jan 14, 2021
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default check currency ·Guidelines ·EDPB Privacy by Design & Default Privacy by Default Privacy by Design Oct 20, 2020
Opinion 17/2020 draft Standard Contractual Clauses submitted by the SI SA (Article 28(8) GDPR) 1 Adopted Opinion 17 /2020 on the draft Standard Contractual Clauses sub mitted by the SI SA (Article 28( 8 ) GDPR) Adopted on 19 May 2020 2 Adopted 4 Final Remarks… check currency ·Opinion ·EDPB International Transfer Controllers Processors May 19, 2020
2020 EDPB Annual Report 2019 EDPB Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR STRONGER RIGHTS An Executive Summary of this report,… check currency Privacy by Design & Default Privacy by Default Supervision May 18, 2020
2020 Contribution of the EDPB to the evaluation of the GDPR under Article 97 1 Adopted Contribution of the EDPB to the e valuation of the GDPR under Article 97 Adopted on 18 February 2020 2 Adopted Table of content s General EDPB policy messages… check currency Privacy Shield Processing Agreement International Transfer Feb 18, 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR check currency ·Guidelines ·EDPB Territorial scope (GDPR) IP Address Processors Nov 12, 2019
Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidelines on codes of conduct and monitoring bodies check currency ·Guidelines ·EDPB Accountability Codes of Conduct GDPR Article 5 Principles of Processing Jun 4, 2019