Search results | European Data Protection Board

Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
11 July 2023
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 11 July 2023 Opinion of the Board (Art. 64) Sweden … of a code of conduct monitoring body pursuant to article 41 GDPR …
Opinion 13/2026 on the draft decision of the Office of the Data Protection Ombudsman (FI SA) regarding the approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR
12 May 2026
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43(3) GDPR 12 May 2026 Opinion of the Board (Art. 64) Finland … of a certification body pursuant to Article 43(3) GDPR …
Recommendations 1/2026 on the Application for Approval and on the elements and principles to be found in Processor Binding Corporate Rules (Art. 47 GDPR)
19 January 2026
Recommendations
… to be found in Processor Binding Corporate Rules (Art. 47 GDPR) Start Date: 19 January 2026 End Date: 02 March 2026 … to be found in Processor Binding Corporate Rules (Art. 47 GDPR) …
Internal EDPB Document 2/2020 on how to deal with complaints relating to data protection infringements started before the entry into application of GDPR that continue after 25 May 2018
30 June 2020
Internal documents
… infringements started before the entry into application of GDPR that continue after 25 May 2018 30 June 2020 Internal … infringements started before the entry into application of GDPR that continue after 25 May 2018 …
Opinion 23/2021 on the draft decision of the competent supervisory authority of Czech Republic regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
20 July 2021
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 20 July 2021 Opinion of the Board (Art. 64) Czech … of a code of conduct monitoring body pursuant to article 41 GDPR …
Czech SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 GDPR
8 January 2020
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 GDPR Decision Type SA Czech Republic 8 January 2020 Data Protection Impact Assessment (DPIA) cz_art35-5_gdpr_list_final.pdf 427.3KB Download Opinion / Binding … of a data protection impact assessment (Article 35(5) GDPR) …
Urgent Binding Decision 01/2021 on the request under Article 66(2) GDPR from the Hamburg (German) Supervisory Authority for ordering the adoption of final measures regarding Facebook Ireland Limited
12 July 2021
Urgent Binding decision of the Board (Art. 66)
… Binding Decision 01/2021 on the request under Article 66(2) GDPR from the Hamburg (German) Supervisory Authority for … Binding Decision 01/2021 on the request under Article 66(2) GDPR from the Hamburg (German) Supervisory Authority for …
Internal EDPB Document 5/2021 on handling complaints against public authorities or private bodies acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State
7 July 2021
Internal documents
… acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State 7 July 2021 Internal … acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State …
Netherland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
27 September 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Slovak SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
8 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovakia 8 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Malta SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Malta 16 October 2018 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Lithuania SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
14 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Lithuania 14 March 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Iceland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
29 August 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Iceland 29 August 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
14 December 2021
Opinion of the Board (Art. 64)
… Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory … Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory …
Czech Republic SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
8 February 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Czech Republic 8 February 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
United Kingdom SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
18 December 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA United Kingdom 18 December 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 2016/679 (GDPR) …
Code de conduite de la Chambre nationale des notaires précisant certaines modalités d’application du RGPD pour les notaires (Code of Conduct of the national chamber of notaries specifying certain modalities regarding the application of GDPR to notaries)
8 April 2021
Other
… specifying certain modalities regarding the application of GDPR to notaries) 8 April 2021 Code owners Chambre nationale … Belgium Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body Not applicable to public authorities/bodies (Art. 41.6. GDPR) Code de conduite de la Chambre nationale des notaires …
EDPBI:DEBE:OSS:D:2020:130
24 July 2020
… an infringement of the General Data Protection Regulation (GDPR). Justification: Our decision is based on the following … Data Protection Regulation. Pursuant to Art. 12(3) of the GDPR, the controller must provide the data subject with … the measures taken upon request pursuant to Art. 15 to 22 GDPR without delay, but at the latest within one month of …
EDPBI:CY:OSS:D:2020:109
2 June 2020
… Cyprus Subject: Investigation of complaint under the GDPR - erasure request of the user Dear I am writing further … Gaijin are justified and in line with article 12.6 of the GDPR. I value that the information requested by the Support … you are reminded that according to Article 12.2 of the GDPR the controller is under the obligation to facilitate …
EDPBI:AT:OSS:D:2020:121
6 July 2020
… tion (EU) 2016/679 (General Data Protection Regulation - GDPR). REASONS A. Arguments of the parties and procedure 1. … procedure in accordance with the provisions of the GDPR. It turned out that the controller’s main es- … authority in this procedure pursuant to Art. 56(1) GDPR. 3. On 5 August 2019, the Austrian DPA requested the …