Search results | European Data Protection Board

Opinion 38/2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
20 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 20 November 2021 Opinion of the Board (Art. 64) Latvia … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 36/2021 on the draft decision of the competent supervisory authority of Norway regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
30 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 30 November 2021 Opinion of the Board (Art. 64) Norway … of a certification body pursuant to Article 43.3 (GDPR) …
Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)
27 October 2023
Urgent Binding decision of the Board (Art. 66)
… measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) 27 October 2023 Urgent Binding decision of the Board … measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) …
Romanian SA fines UiPath SRL for breaching Articles 25 and 32 GDPR
18 July 2023
News
… SA fines UiPath SRL for breaching Articles 25 and 32 GDPR 18 July 2023 Romania Background information Date of … SA fines UiPath SRL for breaching Articles 25 and 32 GDPR …
Opinion 11/2019 on the draft list of the competent supervisory authority of the Czech Republic regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
12 July 2019
Opinion of the Board (Art. 64)
… of a data protection impact assessment (Article 35(5) GDPR) 12 July 2019 Opinion of the Board (Art. 64) EDPB … of a data protection impact assessment (Article 35(5) GDPR) Adopted on 10 July 2019 Adopted 2 Table of contents 1 … 6 Significance of the items on the 35(5) GDPR list …
Germany SAs' list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Germany 16 October 2018 Data … of the General Data Protection Regulation (EU) 2016/679 (GDPR) 337.3KB Download Opinion / Binding decision References … of a data protection impact assessment (Article 35.4 GDPR) …
EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR
9 July 2025
EDPB/EDPS Joint Opinion
… particular the record-keeping obligation under Art. 30(5) GDPR 9 July 2025 EDPB/EDPS Joint Opinion EDPB … particular the record-keeping obligation under Art. 30(5) GDPR …
Opinion 6/2024 on the draft list of the Latvian SA on pro-cessing operations exempt from the data protection impact assessment requirement (Art. 35.5 GDPR)
18 April 2024
Opinion of the Board (Art. 64)
… data protection impact assessment requirement (Art. 35.5 GDPR) 18 April 2024 Opinion of the Board (Art. 64) Latvia … data protection impact assessment requirement (Art. 35.5 GDPR) …
Bulgaria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
10 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Bulgaria 10 October 2018 Data … of the General Data Protection Regulation (EU) 2016/679 (GDPR) 251.9KB Download Opinion / Binding decision References … of a data protection impact assessment (Article 35.4 GDPR) …
Ireland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Ireland 15 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … Article 35 of the General Data Protection Regulation (“GDPR”) prescribes that a Data Protection Impact Assessment …
Romania SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
18 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Romania 18 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … Data Protection Regulation, hereinafter referred to as the GDPR) which provides that, where a type of processing in …
Greece SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Greece 16 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 679/2016 (GDPR). Before issuing such a list, the Authority, in …
Italian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
11 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Italy 11 October 2018 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … 95/46/EC (General Data Protection Regulation, hereinafter ‘GDPR’); Having regard to, in particular, Article 35(1) of …
Belgium SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Belgium 16 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … for which a DPIA shall be required (Section 35 (4) of the GDPR) Each supervisory authority has the obligation to …
Luxembourg SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Luxembourg 6 March 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of such data, repealing Directive 95/46/EC (hereafter “GDPR”), and in particular Article 35 thereof; Having regard …
France SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA France 6 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … impact assessment (DPIA) is required (article 35.4 GDPR) The Commission nationale de l'informatique et des …
Opinion 16/2022 on the draft decision of the competent supervisory authority of Slovenia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
4 July 2022
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 4 July 2022 Opinion of the Board (Art. 64) Slovenia … of a code of conduct monitoring body pursuant to article 41 GDPR …
Opinion 15/2022 on the draft decision of the competent supervisory authority of Luxembourg regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
4 July 2022
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 4 July 2022 Opinion of the Board (Art. 64) Luxembourg … of a code of conduct monitoring body pursuant to article 41 GDPR …
Opinion 14/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
4 July 2022
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 4 July 2022 Opinion of the Board (Art. 64) Bulgaria … of a code of conduct monitoring body pursuant to article 41 GDPR …
Norway SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Norway 16 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Protection Authority hereby decides, in accordance with GDPR Article 35(4), cfr. Article 57(1)(k), that the …