Orientações n.º 9/2022 sobre a notificação da violação de dados pessoais ao abrigo do RGPD

4 April 2023

Final version

See the First version of this publication drafted before public consultation.

Guidelines 9/2022 - version 2.0 643.8KB

Download file 1

Summary: Personal data breaches, what to do 5.1MB

Download file 2

Cybersecurity and data breach

The Digital Euro and its token-based offline modality

20 October 2025

Support Pool of Experts projects

An expert opinion

Over the last year, the EDPB has been working to ensure the highest standards of data protection and privacy in the context of the establishment of the digital euro. For example, the EDPB has adopted a joint opinion with the European Data Protection Supervisor (EDPS) on the Proposal for a Regulation on the establishment of the digital euro.

Decisions regarding the design of the digital euro have significant implications for the rights and freedoms of European individuals as well as for their ability to use data protection-friendly and digital payment methods in the future.

Taking into consideration the joint opinion by the EDPB and the EDPS, the EDPB requested an expert to make an in-depth assessment of the practical feasibility of the “token-based offline modality”, which the EDPB supports. The EDPB also asked the expert to investigate how this solution, suggested by the European Commission and the Eurosystem, can be implemented to ensure the very high level of protection envisaged.

As a result, this report explores the technical feasibility, inherent limitations, possible approaches, and security considerations related to the development of a cash-like, anonymous, and double-spending resistant offline modality for the digital euro.

The EDPB launched this project in the context of the Support Pool of Experts (SPE) programme following a proposal of the Berlin Data Protection Authority (DPA).

The project was completed by the external expert Prof. Dr.-Ing. Tibor Jager in September 2025.

Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)

Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom

16 October 2025

Opinion (Art. 70)

Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation

9 October 2025

Consultas públicas

Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group

7 October 2025

Opinion of the Board (Art. 64)