Search results | European Data Protection Board

Bulgaria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
10 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Bulgaria 10 October 2018 Data … of the General Data Protection Regulation (EU) 2016/679 (GDPR) 251.9KB Download Opinion / Binding decision References … of a data protection impact assessment (Article 35.4 GDPR) … LIST of processing operations requiring data …
Opinion 16/2020 on the draft decision of the competent supervisory authority of the Czech Republic regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
25 May 2020
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 25 May 2020 Opinion of the Board (Art. 64) Czech … of a certification body pursuant to Article 43.3 (GDPR) Adopted on 25 May 2020 2 Adopted Table of contents 1 … 4 2.2 Main points of focus for the assessment (art. 43.2 GDPR and Annex 1 to the EDPB Guidelines) that the …
Opinion 4/2018 on the draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
3 October 2018
Opinion of the Board (Art. 64)
… of a data protection impact assessment (Article 35.4 GDPR) 3 October 2018 Opinion of the Board (Art. 64) Czech … of a data protection impact assessment (Article 35.4 GDPR) Adopted on 25th September 2018 2 Contents 1. Summary … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the EEA Agreement and in particular …
Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)
18 April 2024
Opinion of the Board (Art. 64)
… data protection impact assessment requirement (Art. 35.5 GDPR) 18 April 2024 Opinion of the Board (Art. 64) Latvia … … data protection impact assessment requirement (Art. 35.5 GDPR) …
Hurtig bindende afgørelse 01/2021 i henhold til artikel 66, stk. 2, i databeskyttelsesforordningen (GDPR ) efter anmodning fra den tyske tilsynsmyndighed i Hamburg om at træffe afgørelse om vedtagelse af endelige foranstaltninger over for Facebook
12 July 2021
Urgent Binding decision of the Board (Art. 66)
… til artikel 66, stk. 2, i databeskyttelsesforordningen (GDPR ) efter anmodning fra den tyske tilsynsmyndighed i … til artikel 66, stk. 2, i databeskyttelsesforordningen (GDPR ) efter anmodning fra den tyske tilsynsmyndighed i …
Hurtig bindende afgørelse 01/2023, som den norske tilsynsmyndighed har anmodet om med henblik på at træffe endelige foranstaltninger over for Meta Platforms Ireland Ltd (artikel 66, stk. 2, i GDPR)
27 October 2023
Urgent Binding decision of the Board (Art. 66)
… over for Meta Platforms Ireland Ltd (artikel 66, stk. 2, i GDPR) 27 October 2023 Urgent Binding decision of the Board … over for Meta Platforms Ireland Ltd (artikel 66, stk. 2, i GDPR) …
Ireland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Ireland 15 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … List of Types of Data Processing Operations which … Article 35 of the General Data Protection Regulation (“GDPR”) prescribes that a Data Protection Impact Assessment …
Romania SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
18 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Romania 18 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … DECISION no. 174 of the 18th of October 2018 on the … Data Protection Regulation, hereinafter referred to as the GDPR) which provides that, where a type of processing in …
Greece SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Greece 16 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … HELLENIC DATA PROTECTION AUTHORITY Athens, … of the General Data Protection Regulation (EU) 679/2016 (GDPR). Before issuing such a list, the Authority, in …
Italian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
11 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Italy 11 October 2018 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … GARANTE PER LA PROTEZIONE DEI DATI PERSONALI Having … 95/46/EC (General Data Protection Regulation, hereinafter ‘GDPR’); Having regard to, in particular, Article 35(1) of …
Belgium SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Belgium 16 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … List of the types of processing operations for which a DPIA shall be required (Section 35 (4) of the GDPR) Each supervisory authority has the obligation to …
Luxembourg SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Luxembourg 6 March 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … Decision No 34/2019 of 6 March 2019 of the national … of such data, repealing Directive 95/46/EC (hereafter “GDPR”), and in particular Article 35 thereof; Having regard …
France SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA France 6 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … Deliberation n° 2018-327 of 11 octobre 2018 on the … impact assessment (DPIA) is required (article 35.4 GDPR) The Commission nationale de l'informatique et des …
Norway SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Norway 16 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Norwegian Data Protection Authority UNOFFICIAL … Protection Authority hereby decides, in accordance with GDPR Article 35(4), cfr. Article 57(1)(k), that the …
Finland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Finland 15 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 15.10.2018 1 (3) Office of the Data Protection … data protection impact assessment (DPIA) Article 35 (1) GDPR requires a DPIA when the processing activity is likely …
Hungarian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
23 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Hungary 23 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … Where data processing operations are likely to … European Parliament and of the Council (hereinafter ‘the GDPR’), the National Authority for Data Protection and …
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
19 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Estonia 19 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … FOR DATA PRIVACY AND FREEDOM OF INFORMATION 1 (2) … assessment In case of cross-border data processing (see GDPR art. 35 (6)), the aspect of large scale processing …
Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Croatia 26 July 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … REPUBLIC OF CROATIA PERSONAL DATA PROTECTION AGENCY … FOR WHICH A DPIA SHALL BE REQUIRED PURSUANT TO ARTICLE 35.4 GDPR Having regard to the EDPB Opinion 25/2018 on the draft …
Latvia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
14 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Latvia 14 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Approved by December 18, 2018 Order No. 1-2.1/125 … impact assessment pursuant to Article 35 (4) of the GDPR Data State Inspectorate of the Republic of Latvia …
Austria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
9 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Austria 9 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 Regulation of the Data Protection Authority on … Data Protection Regulation, hereinafter referred to as the GDPR), ABl. Nr. L 119, 4.5.2016, p. 1. Processing operations …