The EDPB does not provide tailored legal advice to citizens or private/public organisations on how to apply data protection law to specific cases. 

The EDPB’s main role is to issue general guidance and opinions. All adopted guidance and opinions can be consulted here: Guidelines, Recommendations, Best Practices and Opinions. We also recommend reading the Data Protection Guide for Small Business. This guide will help you understand key data protection concepts, the rights of individuals under the GDPR, compliance requirements, security measures, and how to handle data breaches.

Additional information on the EDPB's role and the application of the GDPR, can also be found here: https://www.edpb.europa.eu/about-edpb/faq-frequently-asked-questions_en

We also invite you to consult the websites of the data protection authority in your country. The links to the websites of our Members can be found here: https://edpb.europa.eu/about-edpb/board/members_en)

Version: 23/06/2025

We take note of your suggestion to the EDPB to consider this matter for future guidance. You may consult the topics currently included in the EDPB's Work Programme on our website: https://www.edpb.europa.eu/about-edpb/what-we-do/strategy-work-programme_en.

Version: 23/06/2025

TELEFÓNICA Group

Type of BCR:
Controller
2024
ES SA
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
ES SA Decision 305KB
Pre-GDPR
No