Content type · 42 documents in this view · 804 in total

Guidance

Official guidance documents, best practices, and recommendations

🇪🇺 EU 🇳🇱 NL
Filtering by Topic Clear filter Personal Data1841 Controllers1178 Monitoring1106 Processing1015 Supervision990 Supervisory Authorities852 Certification776 Processors563 Codes of Conduct523 Consent467 Data Controller388 International Transfer373
1–42 of 42 sort newestoldest
Opinion 3/2026 FrieslandCampina Group — controller BCRs Dutch SA ·Opinion ·EDPB Social Media International Transfer Controllers Mar 12, 2026
Opinion 34/2025 C.E.C.L certification criteria Greek SA ·Opinion ·EDPB Certification Supervision Accountability Dec 2, 2025
Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Transparency Personal Data Information Provision Modalities and Communication Methods
Opinion 12/2025 Proposal for a Regulation amending Regulation (EU) 2021/2115 and Regulation (EU) 2021/2116, in particular as regards data and interoperability governance Adopted Opinion 12 /2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on 4 June 2025 2… Opinion ·EDPS Social Media Personal Data International Transfer Jun 6, 2025
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Dutch SA ·Opinion ·EDPB Social Media Personal Data Controllers Jun 6, 2025
Opinion 36/2023 Booking.com Group — controller BCRs Dutch SA ·Opinion ·EDPB Social Media Controllers International Transfer Dec 28, 2023
EDPB Article 97 GDPR application report: GDPR successful but improvements needed 1 Adop ted Contribution of the EDPB to the report on the application of the GDPR under Article 97 Adopted on 12 December 2023 2 Adop ted 3 Adop ted Ge neral EDPB policy messages 1… Certification Video Surveillance Supervision Dec 15, 2023
Opinion 22/2023 Controller Binding Corporate Rules for employee data of the UPS Group Belgian SA ·Opinion ·EDPB Social Media Employees Human Resources Nov 16, 2023
Opinion 16/2023 Informatica Group — controller BCRs Irish SA ·Opinion ·EDPB Social Media Controllers International Transfer Sep 28, 2023
Statement 1/2023 first review of the functioning of the adequacy decision for Japan Statement ·EDPB International Transfer Privacy Shield Employees Jul 18, 2023
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB Fines Audit Logs Lawful Basis May 24, 2023
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Controllers Supervisory Authorities Supervision Apr 17, 2023
Guidelines 01/2022 data subject rights - Right of access Guidelines ·EDPB Personal Data Right to Rectification Right of Access Procedures Apr 17, 2023
Guidelines 01/2021 Guidelines 01/2021 Guidelines on Examples regarding Personal Data Breach Notification Guidelines ·EDPB Data Breaches Notification Obligation Article 19 GDPR - Notification of Rectification, Erasure or Restriction Jan 3, 2022
Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Marketing Social Media Personal Data Apr 13, 2021
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB Consent Personal Data GDPR Subject-Matter and Objectives May 4, 2020
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Video Surveillance Monitoring Legitimate Interest Jan 30, 2020
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Privacy by Default Privacy by Design Retention Period 2020
Guidelines 3/2018 territorial scope of the GDPR (Article 3) Guidelines on the territorial scope of the GDPR Guidelines ·EDPB Controllers Territorial scope (GDPR) Processors Nov 12, 2019
Opinion 10/2019 draft list of the competent supervisory authority of Cyprus regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35(4) GDPR) A dopted 1 Opinion 10/2019 on the draft list of the competent supervisory authorit y of Cyprus regarding the processing operation s subject to the requirement of a data protection… Opinion ·EDPB DPIA Supervisory Authorities Privacy Impact Assessment Jul 12, 2019
Opinion 7/2019 draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary m eeting, 12 - 13 March 2019 - Item 2.3.1 Opinion 7 /201 9 on the draft list of the competent supervisory authority of Iceland regarding the processing… Opinion ·EDPB DPIA Supervisory Authorities Monitoring Mar 12, 2019
Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Monitoring DPIA Supervisory Authorities Jan 23, 2019
Opinion 2/2019 draft list of the competent supervisory authority of Norway regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 2 /201 9 on the draft list of the competent supervisory authority of Norway regarding the processing operations… Opinion ·EDPB DPIA Supervisory Authorities Monitoring Jan 23, 2019
Opinion 13/2018 draft list of the competent supervisory authority of Lithuania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 16/2018 draft list of the competent supervisory authority of the Netherlands regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Personal Data Monitoring DPIA Oct 3, 2018
Opinion 19/2018 draft list of the competent supervisory authority of Romania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 4/2018 draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 15/2018 draft list of the competent supervisory authority of Malta regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 17/2018 draft list of the competent supervisory authority of Poland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 18/2018 draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring Personal Data DPIA Oct 3, 2018
Opinion 9/2018 draft list of the competent supervisory authority of France regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 22/2018 draft list of the competent supervisory authority of the United Kingdom regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 14/2018 draft list of the competent supervisory authority of Latvia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 20/2018 draft list of the competent supervisory authority of Sweden regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 2/2018 draft list of the competent supervisory authority of Belgium regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 21/2018 draft list of the competent supervisory authority of Slovakia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB DPIA Supervisory Authorities Personal Data Oct 3, 2018
Opinion 5/2018 draft list of the competent supervisory authorities of Germany regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 11/2018 draft list of the competent supervisory authority of Ireland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 12/2018 draft list of the competent supervisory authority of Italy regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Opinion 6/2018 draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Personal Data Oct 3, 2018
Opinion 10/2018 draft list of the competent supervisory authority of Hungary regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Opinion ·EDPB Monitoring DPIA Supervisory Authorities Oct 3, 2018
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB Lawful Basis Consent Personal Data May 25, 2018