EDPBI:EE:OSS:D:2024:1176

View all Final One Stop Shop Decisions

14 February 2024

LSA

CSA

Main legal reference

Article 5 (Principles relating to processing of personal data)

Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)

Article 16 (Right to rectification)

Article 24 (Responsibility of the controller)

Article 32 (Security of processing)

Keywords

Right to rectification

Transparency

Responsibility of the controller

Data security

Outcome

Reprimand

ee-2024-02-decisionpublic.pdf 212.4KB

Stáhnout

Help make GDPR compliance easy for organisations: what templates would be helpful for you? Provide your feedback

5 November 2025

Following its Helsinki Statement on enhanced clarity, support and engagement, in order to facilitate GDPR compliance, the EDPB intends to develop a series of ready-to-use templates for organisations.

The EDPB is organising this public consultation to collect your ideas on the matter. More specifically, we would like to understand which templates you consider would be most useful for organisations (e.g. template privacy notice, template record of processing activities, etc.).

For your information, the EDPB will already work on creating a template for data protection impact assessment (DPIA) and for data breach notifications.

We invite you to provide your ideas and inputs by completing the public consultation below by 3 December 2025, either by filling in the blank field or by uploading a document.

In case you would like to upload your contribution as a document, we kindly ask you to provide a text of maximum 2500 characters (1 page document). By clicking “Provide your feedback”, you will be redirected to EU Survey where you can submit your contribution.

We thank you for taking the time to contribute to this project and we are looking forward to your inputs!

Veřejné konzultace

Opinion 28/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by Brazil

4 November 2025

Opinion (Art. 70)

The Digital Euro and its token-based offline modality

20 October 2025

Support Pool of Experts projects

An expert opinion

Over the last year, the EDPB has been working to ensure the highest standards of data protection and privacy in the context of the establishment of the digital euro. For example, the EDPB has adopted a joint opinion with the European Data Protection Supervisor (EDPS) on the Proposal for a Regulation on the establishment of the digital euro.

Decisions regarding the design of the digital euro have significant implications for the rights and freedoms of European individuals as well as for their ability to use data protection-friendly and digital payment methods in the future.

Taking into consideration the joint opinion by the EDPB and the EDPS, the EDPB requested an expert to make an in-depth assessment of the practical feasibility of the “token-based offline modality”, which the EDPB supports. The EDPB also asked the expert to investigate how this solution, suggested by the European Commission and the Eurosystem, can be implemented to ensure the very high level of protection envisaged.

As a result, this report explores the technical feasibility, inherent limitations, possible approaches, and security considerations related to the development of a cash-like, anonymous, and double-spending resistant offline modality for the digital euro.

The EDPB launched this project in the context of the Support Pool of Experts (SPE) programme following a proposal of the Berlin Data Protection Authority (DPA).

The project was completed by the external expert Prof. Dr.-Ing. Tibor Jager in September 2025.

Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)

Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)