Guidelines 01/2022 on data subject rights - Right of access

17 April 2023

Final version

See the First version of this publication drafted before public consultation.

Guidelines 01/2022 - version 2.1 1.4MB

Download file 1

Summary: Right of access, how to implement it 865.1KB

Download file 2

Data subject rights

Other (courtesy) translations

These translations have been provided by the Deutsche Gesellchaft für Internationale Zusammenarbeit (GIZ) GmbH. The EDPB is not responsible for the accuracy of the translations.

Ghidul 01/2022 (Romanian)
Настанови 01/2022 (Ukrainian)

The Digital Euro and its token-based offline modality

20 October 2025

Support Pool of Experts projects

An expert opinion

Over the last year, the EDPB has been working to ensure the highest standards of data protection and privacy in the context of the establishment of the digital euro. For example, the EDPB has adopted a joint opinion with the European Data Protection Supervisor (EDPS) on the Proposal for a Regulation on the establishment of the digital euro.

Decisions regarding the design of the digital euro have significant implications for the rights and freedoms of European individuals as well as for their ability to use data protection-friendly and digital payment methods in the future.

Taking into consideration the joint opinion by the EDPB and the EDPS, the EDPB requested an expert to make an in-depth assessment of the practical feasibility of the “token-based offline modality”, which the EDPB supports. The EDPB also asked the expert to investigate how this solution, suggested by the European Commission and the Eurosystem, can be implemented to ensure the very high level of protection envisaged.

As a result, this report explores the technical feasibility, inherent limitations, possible approaches, and security considerations related to the development of a cash-like, anonymous, and double-spending resistant offline modality for the digital euro.

The EDPB launched this project in the context of the Support Pool of Experts (SPE) programme following a proposal of the Berlin Data Protection Authority (DPA).

The project was completed by the external expert Prof. Dr.-Ing. Tibor Jager in September 2025.

Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)

Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)

Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation

9 October 2025

Public Consultations

Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group

7 October 2025

Opinion of the Board (Art. 64)